Block Spam By Math Reloaded

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2025-28872 Mar 11, 21:15 MEDIUM This Month

Missing Authorization vulnerability in jwpegram Block Spam By Math Reloaded allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Block Spam By Math Reloaded: from n/a through 2.2.4. [CVSS 5.3 MEDIUM]

WordPress Authentication Bypass Wordpress Plugin Block Spam By Math Reloaded

NVD

CVSS 3.1

5.3

EPSS

0.2%

CVE-2025-28871 Mar 11, 21:15 MEDIUM This Month

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in jwpegram Block Spam By Math Reloaded allows Stored XSS. This issue affects Block Spam By Math Reloaded: from n/a through 2.2.4. [CVSS 5.9 MEDIUM]

WordPress XSS Wordpress Plugin Block Spam By Math Reloaded

NVD

CVSS 3.1

5.9

EPSS

0.1%

CVE-2025-28872

EPSS 0% CVSS 5.3

MEDIUM This Month

WordPress Authentication Bypass Wordpress Plugin +1

NVD

CVE-2025-28871

EPSS 0% CVSS 5.9

MEDIUM This Month

WordPress XSS Wordpress Plugin +1

NVD