High severity8.8NVD Advisory· Published Feb 28, 2022· Updated Jun 17, 2026
CVE-2022-0411
CVE-2022-0411
Description
The Asgaros Forum WordPress plugin before 2.0.0 does not sanitise and escape the post_id parameter before using it in a SQL statement via a REST route of the plugin (accessible to any authenticated user), leading to a SQL injection
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- WordPress/Asgaros Forum plugindescription
- Range: <2.0.0
Patches
Vulnerability mechanics
References
2- wpscan.com/vulnerability/35272197-c973-48ad-8405-538bfbafa172nvdExploitThird Party Advisory
- plugins.trac.wordpress.org/changeset/2669226/asgaros-forumnvdRelease NotesThird Party Advisory
News mentions
0No linked articles in our index yet.