Read the docs

Highfivery LLC

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Highfivery LLC records in CISA KEV

No Highfivery LLC vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Zero-spam 1 record MEDIUM Zero Spam For Wordpress 1 record LOW

Records

1 record in Zero-spam · all components

TI-2022-00189 CVE-2022-0254 · GHSA-pq2f-3fg3-rw99

Zero Spam < 5.2.11 - Admin+ SQL Injection

Priority MEDIUM 46

The WordPress Zero Spam WordPress plugin before 5.2.11 does not properly sanitise and escape the order and orderby parameters before using them in a SQL statement in the admin dashboard, leading to a SQL injection

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02028 Published 2022-03-14 Fixed in 5.2.11, 5.2.13 CWE-89
Open these records in search →