Vulnerabilities

TI-2026-86203 CVE-2026-120477 · GHSA-xvc3-wff6-474c

Stored cross-site scripting in Stop Spammers Classic WordPress plugin

LOW 21

The Stop Spammers Classic plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'author' POST parameter in versions up to, and including, 2026.6.

CVSS 3.1MEDIUM 4.7 Network No auth User interaction EPSS 0.00251 Published 2026-11-07 No fix listed CWE-79

TI-2026-01765 CVE-2026-2112 · GHSA-qj9g-q4j9-47hp

Dam Spam <= 1.0.8 - Cross-Site Request Forgery to Arbitrary Pending Comment Deletion

LOW 19

The Dam Spam plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.8.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00191 Published 2026-02-18 No fix listed CWE-352

TI-2025-13500 CVE-2025-14795 · GHSA-j989-533p-q6pg

Stop Spammers Classic <= 2026.1 - Cross-Site Request Forgery via Email Allowlist

LOW 19

The Stop Spammers Classic plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2026.1.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00178 Published 2026-01-28 No fix listed CWE-352

TI-2025-02564 CVE-2025-2935 · GHSA-5jmf-8rjr-p73x

Cross-site request forgery in webguyio Stop Spammers Classic

LOW 24

The Anti-Spam: Spam Protection | Block Spam Users, Comments, Forms plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2024.7.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00198 Published 2025-06-06 No fix listed CWE-352

TI-2023-06461 CVE-2023-7065 · GHSA-4mcf-86r4-fm85

Stop Spammers Security | Block Spam Users, Comments, Forms <= 2024.4 - Cross-Site Request Forgery (CSRF) via sfs_process