plugin
16 known security issues reported for the Zero Spam WordPress plugin. Most recent disclosed May 17, 2024.
Running Zero Spam on your site? Check whether your installed version is affected.
Scan your site free[en] Client-Side Enforcement of Server-Side Security vulnerability in Highfivery LLC Zero Spam allows Removing Important Client Functionality.This issue affects Zero Spam: from n/a through 5.5.6.
The Zero Spam for WordPress plugin for WordPress is vulnerable to spam protection bypass in all versions up to, and including, 5.5.6.. This makes it possible for unauthenticated attackers to bypass spam protections.
[en] Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Highfivery LLC Zero Spam for WordPress allows SQL Injection.This issue affects Zero Spam for WordPress: from n/a through 5.4.4.
Update the plugin. Werner Alsemgeest discovered and reported this SQL Injection vulnerability in WordPress Zero Spam Plugin. This could allow a malicious actor to directly interact with your database, including but not limited to stealing information. This vulnerability has been fixed in version 2.1.2.
The Zero Spam plugin for WordPress is vulnerable to SQL Injection parameter in versions up to, and including, 5.4.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers , with administrator-level acc...
The Zero Spam for WordPress plugin is vulnerable to generic SQL Injection via the 'type', 'country', and 's' parameters in versions up to, and including, 5.4.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authentica...
The Zero Spam for WordPress plugin is vulnerable to generic SQL Injection via the 'type', 'country', and 's' parameters in versions up to, and including, 5.4.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authentica...
Update the WordPress Zero Spam plugin to the latest available version (at least 5.2.10). An unknown person discovered and reported this SQL Injection vulnerability in WordPress Zero Spam Plugin. This could allow a malicious actor to directly interact with your database, including but not limited to stealing information...
[en] The WordPress Zero Spam WordPress plugin before 5.2.11 does not properly sanitise and escape the order and orderby parameters before using them in a SQL statement in the admin dashboard, leading to a SQL injection
The WordPress Zero Spam WordPress plugin before 5.2.11 does not properly sanitise and escape the order and orderby parameters before using them in a SQL statement in the admin dashboard, leading to a SQL injection
SQL injection (SQLi) vulnerability discovered in WordPress Zero Spam plugin (versions <= 5.2.9).
The WordPress Zero Spam plugin for WordPress is vulnerable to Blind SQL Injection in versions up to, and including, 2.1.1 due to insufficient escaping on the user supplied Client-IP header parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to ap...
This plugin is prone to a blind SQL injection vulnerability. Update the plugin.
The WordPress Zero Spam plugin for WordPress is vulnerable to Blind SQL Injection in versions up to, and including, 2.1.1 due to insufficient escaping on the user supplied Client-IP header parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to ap...
The WordPress Zero Spam WordPress plugin was affected by an Unauthenticated Blind SQL Injection security vulnerability.
The plugin is vulnerable to SQL Injection parameter in versions up to, and including, 5.4.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers , with administrator-level access and above, to append...
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free