WordPress Plugin Vulnerabilities

Spam Free Plugin 1.9.2 - Multiple Script Direct Request Path Disclosure

Description

The Spam Free WordPress WordPress plugin was affected by a Multiple Script Direct Request Path Disclosure security vulnerability.

Affects Plugins

Plugin icon
spam-free-wordpress
No known fix

References

URL
https://exchange.xforce.ibmcloud.com/vulnerabilities/81007

Classification

Type
FPD
OWASP top 10
A6: Security Misconfiguration
CWE
CWE-209

Miscellaneous

Verified
No
WPVDB ID
8ca7060f-a1de-43b1-b32b-d92ddb49c924

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2023-09-25
Title
Vrm 360 3D Model Viewer <= 1.2.1 - Full Path Disclosure
Published
2025-01-20
Title
1003 Mortgage Application <= 1.87 - Unauthenticated Full Path Disclosure
Published
2014-08-01
Title
Tera Charts 0.1 - Unauthenticated Remote Path Traversal File Disclosure
Published
2014-08-01
Title
NextGEN Gallery <= 1.7.3 - xml/ajax.php Path Disclosure
Published
2014-08-01
Title
Imperial Fairytale - Multiple Script Direct Request Path Disclosure