Skip to content
OpenAdvisories
Medium · 5.4 CVE-2024-53806 EUVD-2024-52138GHSA-24px-m2q8-87hf

WordPress Maspik plugin <= 2.2.7 - CSRF to Settings Change vulnerability

Published Dec 6, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Missing Authorization vulnerability in yonifre Maspik – Spam blacklist contact-forms-anti-spam allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Maspik – Spam blacklist: from n/a through <= 2.2.7.

Affected products

VendorProductAffectedFixed
yonifre Maspik – Spam blacklist ≤ 2.2.7 —

References