Skip to content
OpenAdvisories

Vendor

tomroyal

2 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 6.1

    Stop Registration Spam <= 1.23 - Cross-Site Request Forgery to Cross-Site Scripting

    The Stop Registration Spam plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.23. This is due to missing or incorrect nonce validation. This makes it possible for unauthenticated attackers to inject malici…