Skip to content
OpenAdvisories

Vendor

yonifre

11 known vulnerabilities.

Products

Maspik – Spam blacklist 6 Lenix scss compiler 2 Maspik – Ultimate Spam Protection 2 Lenix Leads Collector 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.1
    CVE-2026-28003

    WordPress Maspik – Spam blacklist plugin <= 2.9.1 - Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in Maspik – Spam blacklist <= 2.9.1 versions.

    yonifre Maspik – Spam blacklist
  • High 7.2
    CVE-2025-1039

    Lenix Elementor Leads addon <= 1.8.2 - Unauthenticated Stored Cross-Site Scripting via URL Form Field

    The Lenix Elementor Leads addon plugin for WordPress is vulnerable to Stored Cross-Site Scripting via a URL form field in all versions up to, and including, 1.8.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthent…

    yonifre Lenix Leads Collector Web / CMS
  • High 7.1
    CVE-2023-48272

    WordPress Maspik – Spam blacklist Plugin <= 0.9.2 is vulnerable to Cross Site Scripting (XSS)

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in yonifre Maspik – Spam Blacklist allows Stored XSS.This issue affects Maspik – Spam Blacklist: from n/a through 0.9.2.

    yonifre Maspik – Spam blacklist