known vulnerability

Yeah, this alert is going around since a while. I fixed all of the issues already a few weeks/months ago but never got any follow-up about the “still existing” vulnerabilities. If someone has more details to share with me, I am happy for any hint.

ok, interesting. thanks

Maybe you could reply to these guys and let them know?

https://patchstack.com/database/vulnerability/asgaros-forum/wordpress-asgaros-forum-plugin-2-1-0-cross-site-request-forgery-csrf-vulnerability?_a_id=15

However looks a great forum and I will use it ??

Hello, the database entry is updated, vulnerability is patched. It would be great if the author would respond to messages because there’s still no reply to the email we sent him on 2022 October 4. Thank you.

Hi @darius_fx

I remember I got a couple of mails during that time and responded to some of them (probably not all). Also I got massively spammed on my mail account by bots so it seems I missed a few of those mails during my clean-up. Apologies for that!