Vulnerabilities

TI-2025-11091 CVE-2025-12094 · GHSA-4qw6-7g5m-4mvh

Protection mechanism failure in OOPSpam Anti-Spam: Spam Protection for WordPress Forms &…

LOW 30

The OOPSpam Anti-Spam: Spam Protection for WordPress Forms & Comments (No CAPTCHA) plugin for WordPress is vulnerable to IP Header Spoofing in all versions up to, and including, 1.2.53.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0034 Published 2025-10-31 No fix listed CWE-693

TI-2023-17978 CVE-2023-35913 · GHSA-564x-7996-vpjv

WordPress OOPSpam Anti-Spam Plugin <= 1.1.44 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in OOPSpam OOPSpam Anti-Spam plugin <= 1.1.44 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00271 Published 2023-07-11 No fix listed CWE-352

TI-2023-08891 CVE-2023-22716 · GHSA-qhwh-8fh5-mxw5

WordPress OOPSpam Anti-Spam Plugin <= 1.1.35 is vulnerable to Cross Site Scripting (XSS)

LOW 27

Auth. (admin+) Cross-Site Scripting vulnerability in OOPSpam OOPSpam Anti-Spam plugin <= 1.1.35 versions.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00392 Published 2023-03-23 No fix listed CWE-79

Vulnerabilities

Filters

Protection mechanism failure in OOPSpam Anti-Spam: Spam Protection for WordPress Forms &…

WordPress OOPSpam Anti-Spam Plugin <= 1.1.44 is vulnerable to Cross Site Request Forgery (CSRF)

WordPress OOPSpam Anti-Spam Plugin <= 1.1.35 is vulnerable to Cross Site Scripting (XSS)