Zero Spam
by WordPress
CVEs (3)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-96752 | Hig | 0.47 | 7.2 | 0.00 | Sep 25, 2026 | The Zero Spam for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Nested POST Array Keys via Contact Form 7 Integration in all versions up to, and including, 5.7.10 due to insufficient input sanitization and output escaping. This makes it possible… | ||
| CVE-2026-105057 | Med | 0.34 | 5.3 | 0.00 | Oct 6, 2026 | Unauthenticated Bypass Vulnerability in Zero Spam <= 5.7.11 versions. | ||
| CVE-2024-32521 | Med | 0.34 | 5.3 | 0.00 | May 17, 2024 | Client-Side Enforcement of Server-Side Security vulnerability in Highfivery LLC Zero Spam allows Removing Important Client Functionality.This issue affects Zero Spam: from n/a through 5.5.6. |
- risk 0.47cvss 7.2epss 0.00
The Zero Spam for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Nested POST Array Keys via Contact Form 7 Integration in all versions up to, and including, 5.7.10 due to insufficient input sanitization and output escaping. This makes it possible…
- risk 0.34cvss 5.3epss 0.00
Unauthenticated Bypass Vulnerability in Zero Spam <= 5.7.11 versions.
- risk 0.34cvss 5.3epss 0.00
Client-Side Enforcement of Server-Side Security vulnerability in Highfivery LLC Zero Spam allows Removing Important Client Functionality.This issue affects Zero Spam: from n/a through 5.5.6.