Read the docs

WP Spell Check

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

WP Spell Check records in CISA KEV

No WP Spell Check vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Wpspellcheck 3 records MEDIUM

Records

5 records

TI-2022-02458 CVE-2022-2658 · GHSA-3p9v-8h44-8rrr

WP Spell Check < 9.13 - Admin+ Stored Cross-Site Scripting

Priority MEDIUM 55

The WP Spell Check WordPress plugin before 9.13 does not escape ignored words, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00475 Published 2023-01-16 Fixed in 9.13
TI-2019-04316 CVE-2019-6027 · GHSA-652g-mfhf-979g

Cross-site request forgery in WP Spell Check

Priority LOW 39

Cross-site request forgery (CSRF) vulnerability in WP Spell Check 7.1.9 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00678 Published 2019-12-26 No fix listed CWE-352
TI-2026-67878 CVE-2026-100506 · GHSA-29vv-gx7g-vm7g

PHP object injection in WordPress WP Spell Check plugin

Priority LOW 34

Deserialization of Untrusted Data vulnerability in WP Spell Check WP Spell Check wp-spell-check allows Object Injection.This issue affects WP Spell Check: from n/a through 12.1.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00359 Published 2026-10-05 No fix listed CWE-502
Open these records in search →