Read the docs

SPIP

Records88All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical20CVSS 9.0–10.0
CVSS high29CVSS 7.0–8.9

Exploited now

SPIP records in CISA KEV

No SPIP vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Spip 69 records CRITICAL Interface Traduction Objets 2 records HIGH Jeux 1 record MEDIUM Referer Spam 1 record HIGH Saisies 1 record MEDIUM Tickets 1 record HIGH

Records

1 record in Referer Spam · all components

TI-2026-22103 CVE-2026-27743 · GHSA-pg8p-25c5-3f44

SPIP referer_spam < 1.3.0 Unauthenticated SQL Injection

Priority HIGH 81

The SPIP referer_spam plugin versions prior to 1.3.0 contain an unauthenticated SQL injection vulnerability in the referer_spam_ajouter and referer_spam_supprimer action handlers.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00677 Published 2026-02-25 Fixed in 1.3.0 CWE-89
Open these records in search →