Really Simple Security logo

Log out
Get PRO

Latest

Input validation vulnerability in Zero Spam for WordPress 5.4.4

  • Severity: high-risk
  • Status: Fixed
  • Publication: May 9, 2023

The Zero Spam plugin for WordPress is vulnerable to a type of attack called SQL Injection. This attack can be used to access sensitive information from the website’s database. This vulnerability affects versions of the plugin up to 5.4.4. This is because the plugin does not properly check the user supplied information and also does not prepare existing SQL queries properly. This vulnerability can be exploited by attackers with administrator-level access or higher.

Detected in:

Zero Spam for WordPress fixed vulnerable versions: >= * <= 5.4.4

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.