Asgaros Forum

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 58% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Modeled within the band wp.org reports; tightens as we track daily.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price.

Recent releases and news for this plugin

1. — Version 3.4.0 Added: Missing notices in administration area when changing configurations Changed: Switched to native WordPress admin notice functions Compatibility with WordPress 6.9 The required minimum WordPress version is now 6.4 3.4.0
2. — Version 3.3.0 Fixed: Cross Site Scripting vulnerability within the spoiler title Fixed: Cross-Site Request Forgery in subscription settings Changed: Updated FAQ 3.3.0
3. — Version 3.2.1 Changed: Updated FAQ 3.2.1
4. — Version 3.2.0 Fixed: Unauthenticated SQL Injection vulnerability 3.2.0
5. — Version 3.1.0 Fixed: Deleted files did not get removed from filesystem in some cases Fixed: It is not longer possible to upload more files than allowed by modifying requests Compatibility with WordPress 6.8 3.1.0
6. — Version 3.0.0 Fixed: _load_textdomain_just_in_time PHP notice Compatibility with WordPress 6.7 3.0.0

12 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. Medium · 4.3 Asgaros Forum <= 3.2.1 - Cross-Site Request Forgery to Subscription Settings Update ↗
   2025-11-11 CVE-2025-12901 Cross-Site Request Forgery (CSRF) Affects <= 3.2.1 Patched in 3.3.0
2. High · 7.5 Asgaros Forum <= 3.1.0 - Unauthenticated SQL Injection ↗
   2025-11-07 CVE-2025-11452 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 3.1.0 Patched in 3.2.0
3. Medium · 6.4 Asgaros Forum <= 3.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
   2025-04-16 CVE-2025-39514 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.2.1 Patched in 3.3.0
4. Medium · 4.3 Asgaros Forum <= 3.0.0 - Authenticated (Subscriber+) Authorization Bypass ↗
   2025-04-07 CVE-2025-32227 Improper Authorization Affects <= 3.0.0 Patched in 3.1.0
5. Medium · 4.3 Asgaros Forum <= 2.8.0 - Cross-Site Request Forgery ↗
   2024-04-12 CVE-2024-32440 Cross-Site Request Forgery (CSRF) Affects <= 2.8.0 Patched in 2.9.0
6. Critical · 9.8 Asgaros Forum <= 2.7.2 - Unauthenticated PHP Object Injection in prepare_unread_status ↗
   2024-01-16 CVE-2024-22284 Deserialization of Untrusted Data Affects <= 2.7.2 Patched in 2.8.0
7. Medium · 6.6 Asgaros Forum <= 2.7.0 - Insufficient Authorization to Authenticated (Admin+) Arbitrary File Upload ↗
   2023-12-06 CVE-2023-5604 Unrestricted Upload of File with Dangerous Type Affects < 2.7.1 Patched in 2.7.1
8. High · 8.8 Asgaros Forum <= 2.1.0 - Cross-Site Request Forgery ↗
   2022-11-09 CVE-2022-41608 Cross-Site Request Forgery (CSRF) Affects <= 2.1.0 Patched in 2.2.0
9. High · 8.8 Asgaros Forum < 2.0.0 - SQL Injection ↗
   2022-01-31 CVE-2022-0411 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects < 2.0.0 Patched in 2.0.0
10. High · 7.2 Asgaros Forum <= 1.15.14 - Admin+ SQL Injection via forum_id ↗
    2021-12-21 CVE-2021-25045 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 1.15.14 Patched in 1.15.15
11. Medium · 4.8 Asgaros Forums <= 1.15.13 - Authenticated Stored Cross-Site Scripting ↗
    2021-11-29 CVE-2021-42365 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.15.13 Patched in 1.15.14
12. Critical · 9.8 Asgaros Forum <= 1.15.12 - Unauthenticated SQL Injection ↗
    2021-10-11 CVE-2021-24827 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 1.15.12 Patched in 1.15.13

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0.1

Translated into 124 languages, 24 at 90% or more

Plus 100 more locales with partial translations.

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

No tier crossings observed yet.

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• Ultimate Member – ForumWP forum integration 500+ installs · 2.9★ · 4 shared tags D
• bbPress 100K+ installs · 3.9★ · 3 shared tags C
• wpForo Forum 20K+ installs · 4.7★ · 3 shared tags A
• Forumax – AI Powered Advanced Community Forum Plugin 600+ installs · 4.6★ · 3 shared tags A
• V Vanilla Forums 100+ installs · 3.3★ · 3 shared tags F
• FluentCommunity – Ultra-Fast High-Performance Social Network, Community, LMS & Online Courses 8K+ installs · 4.8★ · 2 shared tags A

Embed this report card

Drop a live Pulse card for Asgaros Forum into a readme, a review or a deck. It updates itself.

Asgaros Forum: 10K+ active installs, 4.8★ (208 reviews). Plugin Pulse (WP Mayor), as of 2026-08-29. https://plugins.wpmayor.com/plugin/asgaros-forum