Is CVE-2021-24827 actively exploited?

Yes. CVE-2021-24827 is listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, which means exploitation in the wild has been confirmed.

Can CVE-2021-24827 be exploited remotely?

The attack vector of CVE-2021-24827 has not been classified yet.

What is the CVSS score of CVE-2021-24827?

CVE-2021-24827 has not received a CVSS score yet.

HOME VULNERABILITIESCVE-2021-24827

UNKNOWNCISA KEVIN THE WILD

CVE-2021-24827

Published: April 11, 2026

EPSS:67.70%probability of exploitation in 30 daysPercentile:98.6th

Official Description

The Asgaros Forum WordPress plugin before 1.15.13 does not validate and escape user input when subscribing to a topic before using it in a SQL statement, leading to an unauthenticated SQL injection issue

NVD Source

Risk Analysis

The Asgaros Forum WordPress plugin contains a SQL injection vulnerability that unauthenticated users can exploit by subscribing to a topic. This flaw is listed in CISA's KEV, confirming its active exploitation and highlighting the immediate need for remediation.

This vulnerability is actively being exploited in the wild. The SQL injection can be triggered remotely by unauthenticated users.

Recommended Action

Upgrade the Asgaros Forum WordPress plugin to version 1.15.13 or newer to patch this SQL injection vulnerability. Implement robust input validation and escaping for all user-supplied data.

Generated by the CTIWATCH analysis pipeline from this CVE's metadata (CVSS, EPSS, KEV status, exploit intelligence). Verify against vendor advisories before acting.

Technical Analysis

CVE-2021-24827 requires local access, meaning attackers must already have a foothold on the target system.

Exploitation requires some privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

CISA has added CVE-2021-24827 to the Known Exploited Vulnerabilities (KEV) catalog, confirming active exploitation in the wild. U.S. federal agencies are required to patch this within the mandated timeframe, and all organizations should treat remediation as urgent.