Zero Spam vulnerabilities

1 known vulnerability in Zero Spam from Highfivery. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  WordPress Zero Spam: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2022-0254Mar 14, 2022WordPress Zero SpamEPSS 2.03%

  The WordPress Zero Spam WordPress plugin before 5.2.11 does not properly sanitise and escape the order and orderby parameters before using them in a SQL statement in the admin dashboard, leading to a SQL injection