Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
WordPress Plugin SpamBam Key Calculation Security Bypass (2.1) - Vulnerability Database

WordPress Plugin SpamBam Key Calculation Security Bypass (2.1)

Description

WordPress Plugin SpamBam is prone to a security bypass vulnerability because client accessible data can be used to calculate verification keys. Attackers can exploit this issue to submit arbitrary form data via automated scripts and distribute spam.

Remediation

Disable the plugin

References

Wordpress Spambam Plugin : Security vulnerabilities, CVEs - CVEdetails.com

Related Vulnerabilities

WordPress Plugin Security & Malware scan by CleanTalk Security Bypass (2.50) High
Common tags: Missing Update Authentication Bypass
Joomla! Core 2.5.x Security Bypass (2.5.0 - 2.5.2) High
Common tags: Missing Update Authentication Bypass
WordPress Plugin Helpie FAQ-WordPress FAQ Accordion Security Bypass (0.7) High
Common tags: Missing Update Authentication Bypass
WordPress Plugin Insert or Embed Articulate Content into WordPress Security Bypass (4.2996) High
Common tags: Missing Update Authentication Bypass
WordPress Plugin WordPress Automatic Security Bypass (3.53.2) High
Common tags: Missing Update Authentication Bypass

Severity

High

Classification

CWE-264
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Tags

Missing Update
Authentication Bypass