Asgaros Forum Cross-Site Request Forgery Vulnerability in Subscription Settings

A Cross-Site Request Forgery (CSRF) vulnerability has been identified in the Asgaros Forum plugin for WordPress, affecting all versions through 3.2.1. The issue arises from a lack of nonce validation in the set_subscription_level() function, allowing unauthenticated attackers to manipulate the subscription settings of authenticated users. Exploitation requires tricking a logged-in user into clicking a link that initiates the forged request.

Impact

Exploitation of this vulnerability allows for Cross-Site Request Forgery, where an attacker can manipulate the subscription settings of a user without their consent.

Reproduction

To reproduce this vulnerability, an attacker must send a request to the set_subscription_level() function without a valid nonce. This can be done by tricking a logged-in user into clicking a link that performs the action, such as through a phishing attempt or by exploiting another vulnerability that allows for such manipulation.

Remediation

Users are advised to update the Asgaros Forum plugin to version 3.3.0 or later, where this vulnerability has been patched.