plugin

Throws Spam Away Vulnerabilities

1 known security issue reported for the Throws Spam Away WordPress plugin. Most recent disclosed May 16, 2022.

1 high

Running Throws Spam Away on your site? Check whether your installed version is affected.

Scan your site free

Throws SPAM Away <= 3.3 - Cross-Site Request Forgery to Comment Modification

high

The Throws SPAM Away WordPress plugin before 3.3.1 does not have CSRF checks in place when deleting comments (either all, spam, or pending), allowing attackers to make a logged in admin delete comments via a CSRF attack

CVSS:
8.8
Affected:
up to 3.3.1
Fixed in:
3.3.1
Disclosed:
May 16, 2022

CVE-2022-1709 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database