Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Vendor: Trumani Clear all filters
TI-2023-02335 CVE-2023-2488 · GHSA-6q48-f9w9-vmgg

Stop Spammers Security < 2023 - Reflected XSS

Priority MEDIUM 60

The Stop Spammers Security | Block Spam Users, Comments, Forms WordPress plugin before 2023 does not sanitise and escape various parameters before outputting them back in admin dashboard pages, leading to a Reflected Cro…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00522 Published 2023-06-05 Fixed in 2023
TI-2023-02336 CVE-2023-2489 · GHSA-2qcq-xj62-pmcv

Stop Spammers Security < 2023 - Admin+ Stored XSS

Priority MEDIUM 55

The Stop Spammers Security | Block Spam Users, Comments, Forms WordPress plugin before 2023 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00442 Published 2023-06-05 Fixed in 2023
TI-2022-03767 CVE-2022-4120 · GHSA-7x93-m29h-6j9q

Stop Spammers Security < 2022.6 - Unauthenticated PHP Object Injection

Priority HIGH 82

The Stop Spammers Security | Block Spam Users, Comments, Forms WordPress plugin before 2022.6 passes base64 encoded user input to the unserialize() PHP function when CAPTCHA are used as second challenge, which could lead…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.18121 Published 2022-12-26 Fixed in 2022.6
TI-2021-06804 CVE-2021-24517 · GHSA-fp6q-wmwj-3m9p

Stop Spammers Security < 2021.18 - Authenticated Stored XSS

Priority LOW 25

The Stop Spammers Security | Block Spam Users, Comments, Forms WordPress plugin before 2021.18 does not escape some of its settings, allowing high privilege users such as admin to set Cross-Site Scripting payloads in the…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00624 Published 2021-09-06 Fixed in 2021.18 CWE-79
TI-2021-06537 CVE-2021-24245 · GHSA-7vc8-gc65-8vpf

Stop Spammers < 2021.9 - Reflected Cross-Site Scripting (XSS)

Priority LOW 36

The Stop Spammers WordPress plugin before 2021.9 did not escape user input when blocking requests (such as matching a spam word), outputting it in an attribute after sanitising it to remove HTML tags, which is not suffic…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.05721 Published 2021-05-05 Fixed in 2021.9 CWE-79