OOPSpam
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| OOPSpam Anti-Spam | 2 | – | Jul 11, 2023 |
| OOPSpam Anti-Spam: Spam Protection for WordPress Forms & Comments (No CAPTCHA) | 1 | – | Oct 31, 2025 |
Exploited and recent CVEs
- CVE-2025-12094 OOPSpam Anti-Spam: Spam Protection for WordPress Forms & Comments (No CAPTCHA) <= 1.2.53 - Unauthenticated IP Header Spoofing 0.3%
- CVE-2023-35913 WordPress OOPSpam Anti-Spam Plugin <= 1.1.44 is vulnerable to Cross Site Request Forgery (CSRF) 0.3%
- CVE-2023-22716 WordPress OOPSpam Anti-Spam Plugin <= 1.1.35 is vulnerable to Cross Site Scripting (XSS) 0.4%