Lucene search
K

37 matches found

Veracode
Veracode
added 2025/12/13 6:38 a.m.3 views

SQL Injection

WordPress Zero Spam plugin is vulnerable to SQL Injection. The vulnerability is due to insufficient sanitization and escaping of the order and orderby parameters before they are used in SQL queries in the admin dashboard, allowing attackers to inject malicious SQL statements and manipulate databa...

9.8CVSS7.3AI score0.00924EPSS
Exploits2References3Affected Software1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-30323

Malicious code in bioql PyPI...

5.3CVSS6.4AI score0.00387EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2023-36389

Malicious code in bioql PyPI...

7.2CVSS7.7AI score0.00152EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 8:37 a.m.1 views

CVE-2024-32521

Client-Side Enforcement of Server-Side Security vulnerability in Highfivery LLC Zero Spam allows Removing Important Client Functionality.This issue affects Zero Spam: from n/a through 5.5.6...

5.3CVSS7AI score0.00387EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 5:10 a.m.6 views

CVE-2023-32121

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Highfivery LLC Zero Spam for WordPress allows SQL Injection.This issue affects Zero Spam for WordPress: from n/a through 5.4.4...

7.6CVSS7.9AI score0.00152EPSS
Exploits0References1
NVD
NVD
added 2024/05/17 9:15 a.m.10 views

CVE-2024-32521

Client-Side Enforcement of Server-Side Security vulnerability in Highfivery LLC Zero Spam allows Removing Important Client Functionality.This issue affects Zero Spam: from n/a through 5.5.6...

5.3CVSS5.3AI score0.00387EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/05/17 8:56 a.m.12 views

CVE-2024-32521 WordPress Zero Spam for WordPress plugin <= 5.5.6 - Bypass Spam Protection vulnerability

Client-Side Enforcement of Server-Side Security vulnerability in Highfivery LLC Zero Spam allows Removing Important Client Functionality.This issue affects Zero Spam: from n/a through 5.5.6...

5.3CVSS6.9AI score0.00387EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/05/17 8:56 a.m.18 views

CVE-2024-32521 WordPress Zero Spam for WordPress plugin <= 5.5.6 - Bypass Spam Protection vulnerability

Client-Side Enforcement of Server-Side Security vulnerability in Highfivery LLC Zero Spam allows Removing Important Client Functionality.This issue affects Zero Spam: from n/a through 5.5.6...

5.3CVSS5.3AI score0.00387EPSS
Exploits0References1
CVE
CVE
added 2024/05/17 8:56 a.m.67 views

CVE-2024-32521

CVE-2024-32521 affects the WordPress plugin Zero Spam by Highfivery (versions

5.3CVSS5.3AI score0.00387EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/05/17 12:0 a.m.2 views

WordPress plugin Zero Spam 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

5.3CVSS6.6AI score0.00387EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2024/05/17 12:0 a.m.3 views

PT-2024-24640 · Highfivery Llc · Zero Spam

Name of the Vulnerable Software and Affected Versions: Zero Spam versions n/a through 5.5.6 Description: The issue is related to a Client-Side Enforcement of Server-Side Security vulnerability in Highfivery LLC Zero Spam, which allows the removal of important client functionality. Recommendations...

5.3CVSS6.5AI score0.00387EPSS
Exploits0References3
Patchstack
Patchstack
added 2024/04/15 12:58 p.m.2 views

WordPress Zero Spam for WordPress plugin <= 5.5.6 - Bypass Spam Protection vulnerability

Bypass Spam Protection vulnerability discovered by Brandon Roldan Patchstack Alliance in WordPress Plugin Zero Spam versions = 5.5.6...

5.3CVSS7AI score0.00387EPSS
Exploits0Affected Software1
Patchstack
Patchstack
added 2024/04/15 12:0 a.m.9 views

WordPress Zero Spam Plugin <= 5.5.6 is vulnerable to Bypass Vulnerability

Software Zero Spam Type Plugin Vulnerable versions = 5.5.6 Fixed in 5.5.7 OWASP Top 10 A5: Security Misconfiguration Classification Bypass Vulnerability CVE CVE-2024-32521 Patch priority Low CVSS severity Low 5.3 Developer Highfivery PSID 22cfce837443 Credits Brandon Roldan Required privilege...

5.3CVSS6.5AI score0.00387EPSS
Exploits0References2Affected Software1
OSV
OSV
added 2023/11/03 5:15 p.m.0 views

CVE-2023-32121

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Highfivery LLC Zero Spam for WordPress allows SQL Injection.This issue affects Zero Spam for WordPress: from n/a through 5.4.4...

7.2CVSS7.3AI score
Exploits0References1
NVD
NVD
added 2023/11/03 5:15 p.m.7 views

CVE-2023-32121

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Highfivery LLC Zero Spam for WordPress allows SQL Injection.This issue affects Zero Spam for WordPress: from n/a through 5.4.4...

7.6CVSS7.4AI score0.00152EPSS
Exploits0References1
Prion
Prion
added 2023/11/03 5:15 p.m.21 views

Sql injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Highfivery LLC Zero Spam for WordPress allows SQL Injection.This issue affects Zero Spam for WordPress: from n/a through 5.4.4...

5.8CVSS7.4AI score0.00152EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/11/03 4:15 p.m.6 views

CVE-2023-32121 WordPress Zero Spam for WordPress plugin <= 5.4.4 - SQL Injection vulnerability

A vulnerability in Ben Marshall Zero Spam zero-spam.This issue affects Zero Spam: from n/a through = 5.4.4...

7.6CVSS7.5AI score0.00152EPSS
Exploits0References1
CVE
CVE
added 2023/11/03 4:15 p.m.80 views

CVE-2023-32121

CVE-2023-32121 concerns the WordPress plugin Zero Spam for WordPress by Highfivery. The vulnerability is described as an improper neutralization of SQL elements leading to SQL Injection and affects the plugin when installed at versions up to and including 5.4.4. The CVSS metrics indicate a high i...

7.6CVSS7.9AI score0.00152EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2023/11/03 12:0 a.m.2 views

WordPress Plugin Zero Spam for WordPress SQL Injection Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress Plugin Zero Spam for WordPre...

7.2CVSS7.6AI score0.00152EPSS
Exploits0References2
Patchstack
Patchstack
added 2023/05/09 12:0 a.m.7 views

WordPress Zero Spam Plugin <= 5.4.4 is vulnerable to SQL Injection

Software Zero Spam Type Plugin Vulnerable versions = 5.4.4 Fixed in 5.4.5 OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2023-32121 Patch priority Low CVSS severity Low 7.6 Developer Highfivery PSID e207350207ef Credits OZ1NG TOOR, LISA Required privilege Administrator Published ...

7.2CVSS6.9AI score0.00152EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder