WP-SpamFree Anti-Spam

Vulnerabilities 7Slug wp-spamfreeLatest version 2.1.1.6Plugin page →

Minimum safe version

3.2.2

Update to 3.2.2 or later to address 3 fixable vulnerabilities

Latest available2.1.1.6 ✗Affected up to2.1.1.4 ⚠⚠ 3 vulnerabilities have no fix
N/A Unfixed Closed
≤ 3.2.1

WP-SpamFree 3.2.1 - Spam SQL Injection

WPScan
N/A Unfixed Closed
≤ 2.1.1.6

WP-SpamFree Anti-Spam - Authenticated Reflected Cross-Site Scripting (XSS)

WPScan
N/A Unfixed Closed
2017-03-01≤ 2.1.1.6

WP-SpamFree Anti-Spam <= 2.1.1.6 - Reflected Cross-Site Scripting

Wordfence
Medium 6.1 Closed
2022-06-24≤ 2.1.1.4

CVE-2017-20096

CVE
N/A Closed
2011-10-11< 3.2.2

WordPress WP Spam Free Plugin - SQL Injection

Patchstack
N/A Closed
2015-05-15< 1.9.3

WordPress Spam Free Plugin <= 1.9.2 - Bypass

Patchstack
N/A Closed
2015-05-15< 1.9.3

WordPress SpamFree Plugin <= 1.9.2 - Full Path Disclosure

Patchstack