Advisories · Technology

webguyio Stop Spammers Classic.

Every CVE that names webguyio Stop Spammers Classic among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-120477 CVE record

CVSS 4.7 Medium

Stop Spammers Classic <= 2026.6 - Unauthenticated Stored Cross-Site Scripting via 'author' Parameter
- webguyio Stop Spammers Classic
- Cross-site scripting (XSS)
Not analysed yet 7 Nov 2026
CVE-2025-14795 CVE record

CVSS 4.3 Medium

Stop Spammers Classic <= 2026.1 - Cross-Site Request Forgery via Email Allowlist
- webguyio Stop Spammers Classic
- Cross-site request forgery (CSRF)
Not analysed yet 28 Jan 2026
CVE-2025-2935 CVE record

CVSS 5.4 Medium

Anti-Spam: Spam Protection | Block Spam Users, Comments, Forms <= 2024.7 - Cross-Site Request Forgery to Multiple Administrative Actions
- webguyio Stop Spammers Classic
- Cross-site request forgery (CSRF)
Not analysed yet 6 Jun 2025
CVE-2023-7065 CVE record

CVSS 5.4 Medium

Stop Spammers Security | Block Spam Users, Comments, Forms <= 2024.4 - Cross-Site Request Forgery (CSRF) via sfs_process
- webguyio Stop Spammers Classic
- Cross-site request forgery (CSRF)
Not analysed yet 4 May 2024