A vulnerability was found in Asgaros Forum Plugin up to 3.2.1 on WordPress. It has been declared as problematic. The affected element is the function
set_subscription_level of the component Setting Handler. Executing manipulation can lead to cross-site request forgery.
This vulnerability is handled as CVE-2025-12901. The attack can be executed remotely. There is not any exploit available.
