tomroyal

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

tomroyal records in CISA KEV

No tomroyal vulnerabilities are listed in CISA KEV.

Records

3 records

TI-2025-23629 CVE-2025-32564 · GHSA-43mw-w97r-j4p7

WordPress Stop Registration Spam Plugin <= 1.24 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tomroyal Stop Registration Spam allows Reflected XSS.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00293 Published 2025-04-17 No fix listed CWE-79

TI-2024-37053 CVE-2024-56017 · GHSA-8w8w-88r2-6w5q

WordPress Stop Registration Spam Plugin <= 1.23 - CSRF to Stored XSS vulnerability

LOW 30

Cross-Site Request Forgery (CSRF) vulnerability in Tom Royal Stop Registration Spam allows Stored XSS.This issue affects Stop Registration Spam: from n/a through 1.23.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00139 Published 2024-12-16 No fix listed CWE-352

TI-2024-11333 CVE-2024-12219 · GHSA-7p6w-859w-82fp

Stop Registration Spam <= 1.23 - Cross-Site Request Forgery to Cross-Site Scripting

LOW 27

The Stop Registration Spam plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.23.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00233 Published 2024-12-17 No fix listed CWE-352

Open these records in search →

Critical	0
High	2
Medium	1
Low	0
No CVSS	0