CVE-2022-1663 Stop Spam Comments <= 0.2.1.2 - Access Token Bypass

2022-08-2914:40:25

CWE-200

WPScan

www.cve.org

0.001 Low

EPSS

Percentile

40.3%

JSON

The Stop Spam Comments WordPress plugin through 0.2.1.2 does not properly generate the Javascript access token for preventing abuse of comment section, allowing threat authors to easily collect the value and add it to the request.

CNA Affected

[
  {
    "product": "Stop Spam Comments",
    "vendor": "Unknown",
    "versions": [
      {
        "lessThanOrEqual": "0.2.1.2",
        "status": "affected",
        "version": "0.2.1.2",
        "versionType": "custom"
      }
    ]
  }
]

References

wpscan.com/vulnerability/30820be1-e96a-4ff6-b1ec-efda14069e70

0.001 Low

EPSS

Percentile

40.3%

JSON

Related for CVELIST:CVE-2022-1663