WordPress Stop Spam Comments Information Disclosure Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An information disclosure vulnerability exists in WordPress Stop Spam Comments 0.2.1.2 and prior versions, which stems from an inability to properly generate Javascript access tokens to prevent abuse of the comments section. An attacker can easily collect this value and add it to a request by exploiting the vulnerability.