title: Asgaros Forum < 1.15.13 - Unauthenticated SQL Injection
description: The Asgaros Forum WordPress plugin before 1.15.13 does not validate and escape user input when subscribing to a topic before using it in a SQL statement, leading to an unauthenticated SQL injection issue
problem types: CWE-89 SQL Injection
affected:
{
product: Asgaros Forum
vendor: Unknown
versions:
lessThan: 1.15.13, status: affected, version: 1.15.13, versionType: custom
}