Vulnerabilities

TI-2025-23629 CVE-2025-32564 · GHSA-43mw-w97r-j4p7

WordPress Stop Registration Spam Plugin <= 1.24 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tomroyal Stop Registration Spam allows Reflected XSS.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00293 Published 2025-04-17 No fix listed CWE-79

TI-2024-11333 CVE-2024-12219 · GHSA-7p6w-859w-82fp

Stop Registration Spam <= 1.23 - Cross-Site Request Forgery to Cross-Site Scripting

LOW 27

The Stop Registration Spam plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.23.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00233 Published 2024-12-17 No fix listed CWE-352

TI-2024-37053 CVE-2024-56017 · GHSA-8w8w-88r2-6w5q

WordPress Stop Registration Spam Plugin <= 1.23 - CSRF to Stored XSS vulnerability

LOW 30

Cross-Site Request Forgery (CSRF) vulnerability in Tom Royal Stop Registration Spam allows Stored XSS.This issue affects Stop Registration Spam: from n/a through 1.23.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00139 Published 2024-12-16 No fix listed CWE-352

Vulnerabilities

Filters

WordPress Stop Registration Spam Plugin <= 1.24 - Reflected Cross Site Scripting (XSS) vulnerability

Stop Registration Spam <= 1.23 - Cross-Site Request Forgery to Cross-Site Scripting

WordPress Stop Registration Spam Plugin <= 1.23 - CSRF to Stored XSS vulnerability