Skip to content
OpenAdvisories

Package · Packagist

bmarshall511/wordpress_zero_spam

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical 9.8
    CVE-2022-0254

    Zero Spam < 5.2.11 - Admin+ SQL Injection

    The WordPress Zero Spam WordPress plugin before 5.2.11 does not properly sanitise and escape the order and orderby parameters before using them in a SQL statement in the admin dashboard, leading to a SQL injection

    bmarshall511/wordpress_zero_spam Web / CMS Packagist