← Back

Zero Spam

zero-spam

Vendor: Highfivery • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2022-0254
1Highfivery
1Zero Spam
Jun 17, 2026
Mar 14, 2022
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
The WordPress Zero Spam WordPress plugin before 5.2.11 does not properly sanitise and escape the order and orderby parameters before using them in a SQL statement in the admin dashboard, leading to a SQL injection