Skip to content
OpenAdvisories

Vendor

yonifre

11 known vulnerabilities.

Products

Maspik – Spam blacklist 6 Lenix scss compiler 2 Maspik – Ultimate Spam Protection 2 Lenix Leads Collector 1
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Medium 4.3
    CVE-2025-60145

    WordPress Lenix scss compiler Plugin <= 1.2 - Cross Site Request Forgery (CSRF) Vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in yonifre Lenix scss compiler lenix-scss-compiler allows Cross Site Request Forgery.This issue affects Lenix scss compiler: from n/a through <= 1.2.

    yonifre Lenix scss compiler
  • Medium 5.9
    CVE-2025-60144

    WordPress Lenix scss compiler Plugin <= 1.2 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in yonifre Lenix scss compiler lenix-scss-compiler allows Stored XSS.This issue affects Lenix scss compiler: from n/a through <= 1.2.

    yonifre Lenix scss compiler
  • Medium 4.3
    CVE-2025-9888

    Maspik <= 2.5.6 - Cross-Site Request Forgery

    The Maspik – Ultimate Spam Protection plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.5.6. This is due to missing or incorrect nonce validation on the clear_log function. This makes it possible for unau…

    yonifre Maspik – Ultimate Spam Protection Web / CMS
  • Medium 4.3
    CVE-2025-9979

    Maspik <= 2.5.6 - Authenticated (Subscriber+) Missing Authorization to Spam Log Export

    The Maspik plugin for WordPress is vulnerable to Missing Authorization in version 2.5.6 and prior. This is due to missing capability checks on the Maspik_spamlog_download_csv function. This makes it possible for authenticated attackers, with subscriber-level …

    yonifre Maspik – Ultimate Spam Protection Web / CMS
  • Medium 5.4
    CVE-2024-53806

    WordPress Maspik plugin <= 2.2.7 - CSRF to Settings Change vulnerability

    Missing Authorization vulnerability in yonifre Maspik – Spam blacklist contact-forms-anti-spam allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Maspik – Spam blacklist: from n/a through <= 2.2.7.

    yonifre Maspik – Spam blacklist
  • Medium 5.3
    CVE-2023-48271

    WordPress Maspik – Spam Blacklist plugin <= 0.10.3 - IP Filtering Bypass vulnerability

    Authentication Bypass by Spoofing vulnerability in yonifre Maspik – Spam blacklist allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Maspik – Spam blacklist: from n/a through 0.10.3.

    yonifre Maspik – Spam blacklist
  • Medium 5.9
    CVE-2024-25101

    WordPress Maspik – Spam blacklist Plugin <= 0.10.6 is vulnerable to Cross Site Scripting (XSS)

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in yonifre Maspik – Spam Blacklist allows Stored XSS.This issue affects Maspik – Spam Blacklist: from n/a through 0.10.6.

    yonifre Maspik – Spam blacklist
  • Medium 4.3
    CVE-2023-24008

    WordPress Maspik – Spam blacklist Plugin <= 0.7.8 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in yonifre Maspik – Spam Blacklist plugin <= 0.7.8 versions.

    yonifre Maspik – Spam blacklist