Skip to main content

Throws Spam Away

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest
CVE-2022-1709 MEDIUM POC This Month

The Throws SPAM Away WordPress plugin before 3.3.1 does not have CSRF checks in place when deleting comments (either all, spam, or pending), allowing attackers to make a logged in admin delete. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CSRF WordPress Throws Spam Away
NVD WPScan
CVSS 3.1
4.3
EPSS
0.4%
CVE-2022-1709
EPSS 0% CVSS 4.3
MEDIUM POC This Month

The Throws SPAM Away WordPress plugin before 3.3.1 does not have CSRF checks in place when deleting comments (either all, spam, or pending), allowing attackers to make a logged in admin delete. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CSRF WordPress Throws Spam Away
NVD WPScan

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy