4.3
Medium
CVE-2026-39779 Missing Authorization vulnerability in Asgaros Asgaros Forum asgaros-forum allows Exploiting Incorrectly Configured…
Description
Missing Authorization vulnerability in Asgaros Asgaros Forum asgaros-forum allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Asgaros Forum: from n/a through 3.4.0.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Asgaros Forum 3.4 | earliest → 3.4.0 | No fix stated |
Other CVEs of Asgaros Forum
The 5 CVEs of Asgaros Forum →
CVE-2025-12901
The Asgaros Forum plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including,…
4.3
Medium
CVE-2025-11452
The Asgaros Forum plugin for WordPress is vulnerable to SQL Injection via the…
7.5
High
CVE-2025-39514
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Asgaros Asgaros…
6.5
Medium
CVE-2025-32227
Authentication Bypass by Spoofing vulnerability in Asgaros Asgaros Forum asgaros-forum allows Identity Spoofing.This…
4.3
Medium