Extension WordPress
Vulnérabilités Stop Spammers Classic
Cette page rassemble les failles publiées pour Stop Spammers Classic, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Stop Spammers Classic
9 fiches
Stop Spammers Classic <= 2026.3 – Unauthenticated Stored Cross-Site Scripting
The Stop Spammers Classic plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2026.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary…
*-2026.3
2026.4
01/06/2026
Stop Spammers Classic <= 2026.1 – Cross-Site Request Forgery via Email Allowlist
The Stop Spammers Classic plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2026.1. This is due to missing nonce validation in the ss_addtoallowlist class. This makes it possible for unauthenticated…
*-2026.1
2026.2
27/01/2026
Anti-Spam: Spam Protection | Block Spam Users, Comments, Forms <= 2024.7 – Cross-Site Request Forgery to Multiple Administrative Actions
The Anti-Spam: Spam Protection | Block Spam Users, Comments, Forms plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2024.7. This is due to missing or incorrect nonce validation in the…
*-2024.7
2025
05/06/2025
Stop Spammers Security | Block Spam Users, Comments, Forms <= 2024.4 – Cross-Site Request Forgery (CSRF) via sfs_process
The Stop Spammers Security | Block Spam Users, Comments, Forms plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2024.4. This is due to missing or incorrect nonce validation on the…
*-2024.4
2024.5
03/05/2024
Stop Spammers Security <= 2022.6 – Authenticated (Admin+) Stored Cross-Site Scripting
The Stop Spammers Security plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and including, 2022.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,…
*-2022.6
2023
15/05/2023
Stop Spammers Security <= 2022.6 – Reflected Cross-Site Scripting
The Stop Spammers Security plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via several parameters in versions up to, and including, 2022.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers…
*-2022.6
2023
15/05/2023
Stop Spammers Security <= 2022.5 – Unauthenticated PHP Object Injection
The Stop Spammers Security plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 2022.5 via deserialization of untrusted input when issuing a CPATCHA challenge. This allows unauthenticated attackers to inject a PHP…
*-2022.5
2022.6
05/12/2022
Stop Spammers Security <= 2021.17 – Authenticated (Admin+) Stored Cross-Site Scripting
The Stop Spammers Security | Block Spam Users, Comments, Forms WordPress plugin before 2021.18 does not escape some of its settings, allowing high privilege users such as admin to set Cross-Site Scripting payloads in them even when the…
[*, 2021.18)
2021.18
09/08/2021
Stop Spammers <= 2021.8 – Reflected Cross-Site Scripting
The Stop Spammers WordPress plugin before 2021.9 did not escape user input when blocking requests (such as matching a spam word), outputting it in an attribute after sanitising it to remove HTML tags, which is not sufficient and…
[*, 2021.9)
2021.9
08/04/2021
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.