| Package | Affected versions | Patched versions |
|---|---|---|
| asgaros forum | < 2.0.0 | 2.0.0 |
The Asgaros Forum WordPress plugin before 2.0.0 does not sanitise and escape the post_id parameter before using it in a SQL statement via a REST route of the plugin (accessible to any authenticated user), leading to a SQL injection
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free