CVE-2022-1663

The Stop Spam Comments WordPress plugin through 0.2.1.2 does not properly generate the Javascript access token for preventing abuse of comment section, allowing threat authors to easily collect the value and add it to the request.

Score

CVSS 3.1 6.5 Medium

Status

Modified - contact@wpscan.com

Published

2022-08-29

Last modified

2024-08-03

Weaknesses

CWE-200

Affected products

• Stop Spam Comments (Stop Spam Comments Project)
• Stop Spam Comments (Unknown)

References

• https://wpscan.com/vulnerability/30820be1-e96a-4ff6-b1ec-efda14069e70