Read the docs

yonifre

Records12All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9

Exploited now

yonifre records in CISA KEV

No yonifre vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Maspik 4 records MEDIUM Lenix Leads Collector 1 record LOW

Records

4 records in Maspik · all components

TI-2024-08521 CVE-2024-9182 · GHSA-x579-fc2r-gxmj

Maspik - Advanced Spam protection < 2.1.3 - Admin+ Stored XSS

Priority MEDIUM 55

The Maspik WordPress plugin before 2.1.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is disall…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00326 Published 2025-05-15 Fixed in 2.1.3 CWE-79
TI-2023-26135 CVE-2023-48272 · GHSA-x6rc-725g-mf2x

WordPress Maspik – Spam blacklist Plugin <= 0.9.2 is vulnerable to Cross Site Scripting (XSS)

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in yonifre Maspik – Spam Blacklist allows Stored XSS.This issue affects Maspik – Spam Blacklist: from n/a through 0.9.2.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00412 Published 2023-11-30 No fix listed CWE-79
TI-2024-16558 CVE-2024-25101 · GHSA-h4j9-fx9v-cwgq

WordPress Maspik – Spam blacklist Plugin <= 0.10.6 is vulnerable to Cross Site Scripting (XSS)

Priority LOW 27

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in yonifre Maspik – Spam Blacklist allows Stored XSS.This issue affects Maspik – Spam Blacklist: from n/a through 0.10.6.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00418 Published 2024-03-13 No fix listed CWE-79
Open these records in search →