Extension WordPress
Vulnérabilités Maspik – Ultimate Spam Protection
Cette page rassemble les failles publiées pour Maspik – Ultimate Spam Protection, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Maspik – Ultimate Spam Protection
8 fiches
Maspik <= 2.5.6 – Authenticated (Subscriber+) Missing Authorization to Spam Log Export
The Maspik plugin for WordPress is vulnerable to Missing Authorization in version 2.5.6 and prior. This is due to missing capability checks on the Maspik_spamlog_download_csv function. This makes it possible for authenticated attackers, with subscriber-level access and above,…
*-2.5.6
2.5.7
09/09/2025
Maspik <= 2.5.6 – Cross-Site Request Forgery
The Maspik – Ultimate Spam Protection plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.5.6. This is due to missing or incorrect nonce validation on the clear_log function. This makes…
*-2.5.6
2.5.7
09/09/2025
Maspik – Spam blacklist <= 2.2.7 – Cross-Site Request Forgery to Plugin Settings Change
The Maspik – Advanced Spam Protection plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.2.7. This is due to missing or incorrect nonce validation on one of its functions. This…
*-2.2.7
2.2.8
02/12/2024
Maspik – Spam blacklist <= 2.1.2 – Authenticated (Administrator+) Stored Cross-Site Scripting
The Maspik – Spam Blacklist plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 2.1.2 due to insufficient input sanitization and output escaping. This makes it possible for…
*-2.1.2
2.1.3
02/10/2024
Maspik – Spam blacklist <= 0.10.6 – Authenticated (Administrator+) Stored Cross-Site Scripting via settings
The Maspik – Spam Blacklist plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 0.10.6 due to insufficient input sanitization and output escaping. This makes it possible for…
*-0.10.6
0.10.7
12/02/2024
Maspik – Spam blacklist <= 0.10.3 – Bypass
The Maspik – Spam Blacklist plugin for WordPress is vulnerable to IP Filtering Bypass in all versions up to, and including, 0.10.3 due to insufficient IP address validation. This makes it possible for unauthenticated attackers to bypass IP-based…
*-0.10.3
0.10.4
21/11/2023
Maspik – Spam blacklist <= 0.9.2 – Unauthenticated Stored Cross-Site Scripting via efas_add_to_log
The Maspik – Spam Blacklist plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the efas_add_to_log function in all versions up to, and including, 0.9.2 due to insufficient input sanitization and output escaping. This makes it possible…
*-0.9.2
0.9.3
21/11/2023
Maspik – Spam blacklist <= 0.7.8 – Cross-Site Request Forgery
The Maspik plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 0.7.8. This is due to missing or incorrect nonce validation in the file /admin/partials/contact-forms-anti-spam-log.php. This makes it possible for unauthenticated attackers…
*-0.7.8
0.7.9
27/02/2023
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.