CVE-2025-39414 WordPress spam-stopper plugin <= 3.1.3 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Mike spam-stopper allows Stored XSS. This issue affects spam-stopper: from n/a through 3.1.3...

CVE-2025-39414

CVE-2025-39414 concerns the WordPress spam-stopper plugin (versions n/a–3.1.3) with a CSRF leading to Stored XSS. The vulnerability is confirmed in connected sources (Patchstack/Red Hat/CVE listings) and Wordfence references; CVSSv3.1 base score 7.1 (HIGH) with network access, user interaction re...

WordPress spam-stopper plugin <= 3.1.3 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by johska Patchstack Alliance in WordPress Plugin spam-stopper versions = 3.1.3...