3 matches found
CVE-2026-27743
The SPIP refererspam plugin versions prior to 1.3.0 contain an unauthenticated SQL injection vulnerability in the refererspamajouter and refererspamsupprimer action handlers. The handlers read the url parameter from a GET request and interpolate it directly into SQL LIKE clauses without input...
CVE-2023-32497
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Supersoju Block Referer Spam plugin = 1.1.9.4 versions...
CVE-2023-32497
CVE-2023-32497 is a Stored XSS vulnerability in the WordPress plugin Block Referer Spam (Supersoju) that affects versions