Trumani
Trumani Stop Spammers: vulnerabilidades y CVE
Trumani Stop Spammers tiene 6 vulnerabilidades publicadas, 1 de ellas en los últimos 12 meses. 1 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE6
Últimos 12 meses1
Críticas1
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2026-48876 | Alta (7.1) | 0.25% | — | 15 jun 2026 | Unauthenticated Cross Site Scripting (XSS) in Stop Spammers <= 2026.3 versions. |
| CVE-2023-2489 | Media (4.8) | 0.44% | — | 5 jun 2023 | The Stop Spammers Security | Block Spam Users, Comments, Forms WordPress plugin before 2023 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored… |
| CVE-2023-2488 | Media (6.1) | 0.52% | — | 5 jun 2023 | The Stop Spammers Security | Block Spam Users, Comments, Forms WordPress plugin before 2023 does not sanitise and escape various parameters before outputting them back in admin dashboard pages, leading to a Reflected… |
| CVE-2022-4120 | Crítica (9.8) | 18% | — | 26 dic 2022 | The Stop Spammers Security | Block Spam Users, Comments, Forms WordPress plugin before 2022.6 passes base64 encoded user input to the unserialize() PHP function when CAPTCHA are used as second challenge, which could… |
| CVE-2021-24517 | Media (5.4) | 0.62% | — | 6 sept 2021 | The Stop Spammers Security | Block Spam Users, Comments, Forms WordPress plugin before 2021.18 does not escape some of its settings, allowing high privilege users such as admin to set Cross-Site Scripting payloads in… |
| CVE-2021-24245 | Media (6.1) | 5.7% | — | 6 may 2021 | The Stop Spammers WordPress plugin before 2021.9 did not escape user input when blocking requests (such as matching a spam word), outputting it in an attribute after sanitising it to remove HTML tags, which is not… |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.