Asgaros WordPress plugin - SQLi (CVE-2021-24827)
Description
The Asgaros Forum WordPress plugin before 1.15.13 does not validate and escape user input when subscribing to a topic before using it in a SQL statement, leading to an unauthenticated SQL injection issue
psychologyCrowdSec Analysis
CVE-2021-24827 is a critical vulnerability in the Asgaros Forum WordPress plugin that allows unauthenticated attackers to perform SQL injection by sending crafted requests during the topic subscription process.
CrowdSec has been tracking this vulnerability and its exploits since 5th of February 2025.
CrowdSec network data shows that most actors exploiting CVE-2021-24827 rely on broad, untargeted scans with minimal filtering. The activity is largely automated and opportunistic in nature. Telemetry from the CrowdSec network also shows that exploitation activity for CVE-2021-24827 remains steady week-over-week. Attack volumes are consistent with long-term trends, indicating sustained interest from threat actors. CVE-2021-24827 continues to be an active part of the threat landscape and will likely remain this way for the forseeable future.
Observed attack attempts are characterized by requests made to URLs including /forum/?subscribe_topic=.
Full Intelligence Available
Connect your API key to access CrowdSec scores, exploit timelines, and attacker IPs.
| Event | Date |
|---|---|
| CVE Published | 2021-11-08 |
| Rule Released | 2025-02-05 |
| CrowdSec First Seen | 2025-02-06 |