Wwebguyio

Products

Exploited and recent CVEs

• CVE-2026-120477 Medium 4.7 Stop Spammers Classic <= 2026.6 - Unauthenticated Stored Cross-Site Scripting via 'author' Parameter –
• CVE-2026-2112 Medium 4.3 Dam Spam <= 1.0.8 - Cross-Site Request Forgery to Arbitrary Pending Comment Deletion 0.2%
• CVE-2025-14795 Medium 4.3 Stop Spammers Classic <= 2026.1 - Cross-Site Request Forgery via Email Allowlist 0.2%
• CVE-2025-2935 Medium 5.4 Anti-Spam: Spam Protection | Block Spam Users, Comments, Forms <= 2024.7 - Cross-Site Request Forgery to Multiple Administrative Actions 0.2%
• CVE-2023-7065 Medium 5.4 Stop Spammers Security | Block Spam Users, Comments, Forms <= 2024.4 - Cross-Site Request Forgery (CSRF) via sfs_process 0.2%