Wordfence alert

#1 · May 9, 2025, 1:46 am

is anyone else getting this, we only had a update two weeks ago?

Plugin Name: Asgaros Forum
Current Plugin Version: 3.1.0
Details: To protect your site from this vulnerability, the safest option is to deactivate and completely remove “Asgaros Forum” until a patched version is available. Get more information.(opens in new tab)
Repository URL: https://wordpress.org/plugins/asgaros-forum(opens in new tab)
Vulnerability Information: https://www.wordfence.com/threat-intel/vulnerabilities/id/df324557-9ead-46aa-a019-89d1d5ca6d9c?source=plugin(opens in new tab)
Vulnerability Severity: 6.4/10.0 (Medium)

#2 · May 17, 2025, 12:40 pm

seems to have righted itself.

#3 · May 27, 2025, 9:58 am

Quote from speed stars game on May 9, 2025, 1:46 am

is anyone else getting this, we only had a update two weeks ago?

Plugin Name: Asgaros Forum

Current Plugin Version: 3.1.0

Details: To protect your site from this vulnerability, the safest option is to deactivate and completely remove “Asgaros Forum” until a patched version is available. Get more information.(opens in new tab)

Repository URL: https://wordpress.org/plugins/asgaros-forum(opens in new tab)

Vulnerability Information: https://www.wordfence.com/threat-intel/vulnerabilities/id/df324557-9ead-46aa-a019-89d1d5ca6d9c?source=plugin(opens in new tab)

Vulnerability Severity: 6.4/10.0 (Medium)

#4 · July 14, 2025, 6:38 am

so still an issue? I really hope someone fixes/patches this software.

https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/asgaros-forum/asgaros-forum-310-authenticated-contributor-stored-cross-site-scripting