Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Highfivery LLC Clear all filters
TI-2023-15424 CVE-2023-32121 · GHSA-pfp8-5w8q-66mv

WordPress Zero Spam Plugin <= 5.4.4 is vulnerable to SQL Injection

Priority LOW 37

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Highfivery LLC Zero Spam for WordPress allows SQL Injection.This issue affects Zero Spam for WordPress: from n/a throu…

CVSS 3.1HIGH 7.6 Network High privileges No interaction EPSS 0.0073 Published 2023-11-03 No fix listed CWE-89
TI-2022-00189 CVE-2022-0254 · GHSA-pq2f-3fg3-rw99

Zero Spam < 5.2.11 - Admin+ SQL Injection

Priority MEDIUM 46

The WordPress Zero Spam WordPress plugin before 5.2.11 does not properly sanitise and escape the order and orderby parameters before using them in a SQL statement in the admin dashboard, leading to a SQL injection

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02028 Published 2022-03-14 Fixed in 5.2.11, 5.2.13 CWE-89