Packagist/bmarshall511/wordpress_zero_spam CVE-2022-0254: critical 9.8, EPSS 2.03%

SQL Injection in WordPress Zero Spam WordPress plugin

Action: Upgrade bmarshall511/wordpress_zero_spam to 5.2.13 or later.

composer require bmarshall511/wordpress_zero_spam:5.2.13

Affected

Fixed versions

Sources

• osv: GHSA-pq2f-3fg3-rw99
• https://nvd.nist.gov/vuln/detail/CVE-2022-0254
• https://github.com/Highfivery/zero-spam-for-wordpress/commit/49723f696f1e2f2a76ac89375910bb036a4895f3
• https://github.com/Highfivery/zero-spam-for-wordpress
• https://plugins.trac.wordpress.org/changeset/2660225
• https://plugins.trac.wordpress.org/changeset/2680906
• https://wpscan.com/vulnerability/ae54681f-7b89-408c-b0ee-ba4a520db997

CVE-2022-0254 · published 2022-03-15T00:00:57Z · modified 2026-09-10T03:49:18.057054089Z · JSON