Read the docs

Highfivery LLC

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Highfivery LLC records in CISA KEV

No Highfivery LLC vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Zero-spam 1 record MEDIUM Zero Spam For Wordpress 1 record LOW

Records

3 records

TI-2022-00189 CVE-2022-0254 · GHSA-pq2f-3fg3-rw99

Zero Spam < 5.2.11 - Admin+ SQL Injection

Priority MEDIUM 46

The WordPress Zero Spam WordPress plugin before 5.2.11 does not properly sanitise and escape the order and orderby parameters before using them in a SQL statement in the admin dashboard, leading to a SQL injection

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02028 Published 2022-03-14 Fixed in 5.2.11, 5.2.13 CWE-89
TI-2023-15424 CVE-2023-32121 · GHSA-pfp8-5w8q-66mv

WordPress Zero Spam Plugin <= 5.4.4 is vulnerable to SQL Injection

Priority LOW 37

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Highfivery LLC Zero Spam for WordPress allows SQL Injection.This issue affects Zero Spam for WordPress: from n/a throu…

CVSS 3.1HIGH 7.6 Network High privileges No interaction EPSS 0.0073 Published 2023-11-03 No fix listed CWE-89
Open these records in search →