Asgaros Forum v1.15.13: Security Release

#1 · October 8, 2021, 2:57 pm

I am happy to announce version 1.15.13 of the Asgaros Forum plugin for WordPress which comes with a couple of security fixes.

Fixed multiple Unauthenticated SQL Injection vulnerabilities in the subscription-logic

Version 1.15.13 of Asgaros Forum will be available in the next 24 hours via the WordPress Updater!

sam2019 and andre have reacted to this post.

If you want to support the development of Asgaros Forum, you can leave a good review or donate. Thank you very much!

#2 · October 9, 2021, 9:32 am

i installed it, no issues!

Thanks

#3 · October 18, 2021, 2:14 am

Immediately after this update, all of my users are now having issues with NOT being able to turn off forum subscriptions. They keep receiving email notifications of their former subscription status, even though their individual account forum option is turned to off entirely. Please advise, thanks!

#4 · November 25, 2021, 3:22 am

Hello @wolfco

Does this issue still happen?

If you want to support the development of Asgaros Forum, you can leave a good review or donate. Thank you very much!

#5 · December 16, 2021, 8:15 pm

@asgaros

I have the same Problems after Update to Version 1.15.16

Nur ein Biker weiß, warum ein Hund seinen Kopf aus einem Autofenster steckt.
Only a biker knows why a dog sticks its head out a car window.

#6 · December 17, 2021, 5:15 am

I cant log in to my forum anymore, nor can other members.

GAU !!!!

Uploaded files:

#7 · December 17, 2021, 5:23 am

Hello @biker

This is coming from a couple of security-fixes which I had to apply recently. The bug you see is a side-effect which I will fix asap.

@sam2019 This shortcode is not coming from Asgaros Forum.

Biker has reacted to this post.

If you want to support the development of Asgaros Forum, you can leave a good review or donate. Thank you very much!

#8 · December 17, 2021, 5:35 am

Quote from Asgaros on December 17, 2021, 5:23 am

Hello @biker

This is coming from a couple of security-fixes which I had to apply recently. The bug you see is a side-effect which I will fix asap.

@sam2019 This shortcode is not coming from Asgaros Forum.

no it comes from another plugin FOR the forum software which I have now disabled BUT that did not help.

I still cant log in other than directly thru my master account in wordpress

now it looks like this, no option to log in anymore at all

Uploaded files:

#9 · December 17, 2021, 5:46 am

the frontend utilities do not work anymore

and I have no clue how to activate the standard login for this forum.

It is a HUGE mess.

#10 · December 17, 2021, 7:15 am

Hello @sam2019

Can you provide me the plugin-files in a zip so I can quickly debug it?

If you want to support the development of Asgaros Forum, you can leave a good review or donate. Thank you very much!