CVE-2022-0411

The Asgaros Forum WordPress plugin before 2.0.0 does not sanitise and escape the post_id parameter before using it in a SQL statement via a REST route of the plugin (accessible to any authenticated user), leading to a SQL injection

• CWE-89

• https://plugins.trac.wordpress.org/changeset/2669226/asgaros-forumRelease Notes, Third Party Advisory
• https://wpscan.com/vulnerability/35272197-c973-48ad-8405-538bfbafa172Exploit, Third Party Advisory
• https://plugins.trac.wordpress.org/changeset/2669226/asgaros-forumRelease Notes, Third Party Advisory
• https://wpscan.com/vulnerability/35272197-c973-48ad-8405-538bfbafa172Exploit, Third Party Advisory

Published

Feb 28, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-0405Improper Access Control in GitHub repository janeczku/calibr…4.3
• CVE-2022-0406Improper Authorization in GitHub repository janeczku/calibre…4.3
• CVE-2022-0407Heap-based Buffer Overflow in GitHub repository vim/vim prio…7.8
• CVE-2022-0408Stack-based Buffer Overflow in GitHub repository vim/vim pri…7.8
• CVE-2022-0409Unrestricted Upload of File with Dangerous Type in Packagist…7.8
• CVE-2022-0410The WP Visitor Statistics (Real Time Traffic) WordPress plug…8.8
• CVE-2022-0412The TI WooCommerce Wishlist WordPress plugin before 1.40.1, …9.8
• CVE-2022-0413Use After Free in GitHub repository vim/vim prior to 8.2.7.8
• CVE-2022-0414Improper Validation of Specified Quantity in Input in Packag…4.3
• CVE-2022-0415Remote Command Execution in uploading repository file in Git…8.8
• CVE-2022-0417Heap-based Buffer Overflow GitHub repository vim/vim prior t…7.8
• CVE-2022-0418The Event List WordPress plugin before 0.8.8 does not saniti…4.8