Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
1 selected

2 records

Release: Stop Spammers Security | Block Spam Users, Comments, Forms 2023 Clear all filters
TI-2023-02335 CVE-2023-2488 · GHSA-6q48-f9w9-vmgg

Stop Spammers Security < 2023 - Reflected XSS

Priority MEDIUM 60

The Stop Spammers Security | Block Spam Users, Comments, Forms WordPress plugin before 2023 does not sanitise and escape various parameters before outputting them back in admin dashboard pages, leading to a Reflected Cro…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00522 Published 2023-06-05 Fixed in 2023
TI-2023-02336 CVE-2023-2489 · GHSA-2qcq-xj62-pmcv

Stop Spammers Security < 2023 - Admin+ Stored XSS

Priority MEDIUM 55

The Stop Spammers Security | Block Spam Users, Comments, Forms WordPress plugin before 2023 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00442 Published 2023-06-05 Fixed in 2023