vulnerability
WordPress Plugin: asgaros-forum: CVE-2025-32227: Improper Authorization
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 4 | (AV:N/AC:L/Au:S/C:N/I:P/A:N) | Apr 7, 2025 | Oct 31, 2025 | Oct 31, 2025 |
Severity
4
CVSS
(AV:N/AC:L/Au:S/C:N/I:P/A:N)
Published
Apr 7, 2025
Added
Oct 31, 2025
Modified
Oct 31, 2025
Description
The Asgaros Forum plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.0.0. This makes it possible for authenticated attackers, with subscriber-level access and above, to bypass something related to file numbers, though it is not clear exactly what this means from the original CNAs report.
Solution
asgaros-forum-plugin-cve-2025-32227
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.