WordPress Plugin Vulnerabilities

Spam Free Plugin 1.9.2 - IP Blocklist Restriction Bypass

Description

The Spam Free WordPress WordPress plugin was affected by an IP Blocklist Restriction Bypass security vulnerability.

Affects Plugins

Plugin icon
spam-free-wordpress
No known fix

References

URL
https://packetstormsecurity.com/files/#119274/
URL
https://exchange.xforce.ibmcloud.com/vulnerabilities/81006

Classification

Type
AUTHBYPASS
OWASP top 10
A2: Broken Authentication and Session Management
CWE
CWE-287

Miscellaneous

Verified
No
WPVDB ID
5102581e-7946-4af3-9423-756519955a5e

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2015-02-19
Title
Duplicator 0.5.8 - Privilege Escalation
Published
2025-02-26
Title
Login Me Now < 1.7.3 - Authentication Bypass
Published
2025-04-10
Title
Paid Videochat Turnkey Site < 7.3.12 - Authentication Bypass
Published
2018-03-13
Title
UserPro <= 4.9.20 - User Registration With Administrator Role
Published
2019-10-09
Title
iThemes Sync <= 2.0.17 - Insufficient Secure Key Validation