The vulnerability is a missing authorization flaw in the Asgaros Forum plugin for WordPress. It allows attackers to bypass normal access controls and perform actions reserved for higher‑privilege users. Potentially, an attacker could create posts, delete content, or otherwise manipulate the forum without proper permissions, leading to integrity and availability risks for the site.

The vulnerability affects the Asgaros Forum plugin for WordPress in all releases up to and including version 3.4.0. Sites using these versions are affected, but the CVE does not provide any detail about contextual access restrictions or additional safeguards that may be in place.

The CVSS score of 4.3 indicates a moderate severity. No EPSS score is available and the vulnerability is not listed in the CISA KEV catalog. Based on the description, it is inferred that the flaw is a broken access control check; exploitation therefore likely requires access to the site and the ability to construct authenticated requests to the plugin's endpoints. The CVE does not specify a direct attack vector, so it is inferred that an attacker would need to target the plugin directly, possibly through a publicly exposed site, or rely on a coerced authenticated user to perform the exploit.