Plugin icon

Zero Spam for WordPress

zero-spam

Vulnerabilities:

6

Last Updated:

October 4, 2026

Active Installs:

20000

Published
Title
Fixed in
CVSS
Published
2026-10-05
Title
Zero Spam < 5.7.12 - Unauthenticated Spam Protection Bypass on Login
Fixed in
Fixed in 5.7.12
CVSS
5.3 (medium)
Published
2026-09-24
Title
Zero Spam for WordPress < 5.7.11 - Unauthenticated Stored Cross-Site Scripting via Nested POST Array Keys via Contact Form 7 Integration
Fixed in
Fixed in 5.7.11
CVSS
7.2 (high)
Published
2024-04-15
Title
Zero Spam < 5.5.7 - Spam Protection Bypass
Fixed in
Fixed in 5.5.7
CVSS
5.3 (medium)
Published
2023-05-09
Title
Zero Spam < 5.4.5 - Admin+ SQL Injection
Fixed in
Fixed in 5.4.5
CVSS
6.8 (medium)
Published
2022-02-18
Title
Zero Spam < 5.2.11 - Admin+ SQL Injection
Fixed in
Fixed in 5.2.11
CVSS
6.8 (medium)
Published
2016-08-24
Title
WordPress Zero Spam < 2.2.0 - Unauthenticated Blind SQL Injection
Fixed in
Fixed in 2.2.0
CVSS
n/a