Throws Spam Away
by WordPress
CVEs (2)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-81763 | Cri | 0.60 | 9.3 | 0.00 | Aug 31, 2026 | Unauthenticated SQL Injection in Throws SPAM Away <= 3.8.2 versions. | ||
| CVE-2022-1709 | Med | 0.28 | 4.3 | 0.00 | Jun 8, 2022 | The Throws SPAM Away WordPress plugin before 3.3.1 does not have CSRF checks in place when deleting comments (either all, spam, or pending), allowing attackers to make a logged in admin delete comments via a CSRF attack |
- risk 0.60cvss 9.3epss 0.00
Unauthenticated SQL Injection in Throws SPAM Away <= 3.8.2 versions.
- risk 0.28cvss 4.3epss 0.00
The Throws SPAM Away WordPress plugin before 3.3.1 does not have CSRF checks in place when deleting comments (either all, spam, or pending), allowing attackers to make a logged in admin delete comments via a CSRF attack