WordPress · Asgaros Forum · CVE-2021-25045
**Name of the Vulnerable Software and Affected Versions**
Asgaros Forum WordPress plugin versions prior to 1.15.15
**Description**
The issue arises from the lack of validation or escaping of the `forum id` parameter before its use in a SQL statement when editing a forum, leading to an SQL injection issue.
**Recommendations**
For versions prior to 1.15.15, update to version 1.15.15 or later to resolve the issue. As a temporary workaround, consider restricting access to the forum editing functionality to minimize the risk of exploitation.