Anti Spam Vulnerabilities

The Titan Anti-spam & Security plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 7.3.7. This makes it possible for unauthenticated attackers to perform an unauthorized action.

CVSS:

4.3

Affected:

up to 7.3.7

Fixed in:

7.3.8

Disclosed:

Jul 11, 2024

CVE-2024-38777 on NVD →

The Titan Anti Spam & Security plugin for WordPress is vulnerable to protection bypass due to improper IP validation in versions up to, and including, 7.3.0. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to download the logs of the plugin which can contain sensitive in...

CVSS:

5.3

Affected:

up to 7.3.0

Fixed in:

7.3.1

Disclosed:

Aug 17, 2022

CVE-2022-2877 on NVD →

The Titan Anti-spam & Security plugin for WordPress is vulnerable to Cross-Site Scripting in versions up to, and including, 4.1 due to insufficient input sanitization and output escaping on the `antspm-q` and `antspm-e-email-url-website` parameters. This makes it possible for attackers to inject arbitrary web scripts t...

CVSS:

6.1

Affected:

up to 4.2

Fixed in:

4.2

Disclosed:

Jan 30, 2016