WordPress Plugin Vulnerabilities

WP-SpamFree 3.2.1 - Spam SQL Injection

Description

The wp-spamfree WordPress plugin was affected by a Spam SQL Injection security vulnerability.

Affects Plugins

Plugin icon
wp-spamfree
No known fix

References

Exploitdb
17970

Classification

Type
SQLI
OWASP top 10
A1: Injection
CWE
CWE-89

Miscellaneous

Verified
No
WPVDB ID
23c6895e-1733-44f1-9e7e-c991fd8e8bfd

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2023-07-24
Title
Quasar form <= 6.1 - Subscriber+ SQLi
Published
2025-03-21
Title
ProfileGrid – User Profiles, Groups and Communities < 5.9.4.8 - Authenticated (Subscriber+) SQL Injection
Published
2021-02-08
Title
Ultimate Maps by Supsystic < 1.1.17 - Authenticated SQL Injections
Published
2014-08-01
Title
Media Library Categories <= 1.0.6 - SQL Injection
Published
2015-01-12
Title
Photo Gallery <= 1.2.7 - Unauthenticated SQL injection