Access violation vulnerability in Maspik – Ultimate Spam Protection 2.5.6

The Maspik plugin for WordPress has a security issue in versions 2.5.6 and earlier. This is because it doesn’t check for certain permissions when using the Maspik_spamlog_download_csv function. This means that someone who is logged in and has subscriber-level access or higher can download a database of blocked spam submissions. This database may also contain legitimate submissions with personal information that was mistakenly blocked.