Approved changes feed: RSS · Atom

cpe:2.3:a:wpspellcheck:wpspellcheck:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

VendorWpspellcheck (ab7499a8-5b27-57fe-904b-9a21e2d1165a)
ProductWpspellcheck (9556b8f5-da9f-574b-ad5d-f2e44f8eea53)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-22143 vulnerable 2026-06-08 06:29:33.927780 WordPress WP Spell Check Plugin <= 9.17 is vulnerable to Cross Site Request Forgery (CSRF)
MEDIUM (5.4)
Cross-Site Request Forgery (CSRF) vulnerability in WP Spell Check.This issue affects WP Spell Check: from n/a through 9.17.
Published: 2024-01-31T12:56:27.343Z
Updated: 2026-04-28T16:09:08.494Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-2658 vulnerable 2026-06-08 05:43:35.976962 WP Spell Check < 9.13 - Admin+ Stored Cross-Site Scripting
The WP Spell Check WordPress plugin before 9.13 does not escape ignored words, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
Published: 2023-01-16T15:38:13.222Z
Updated: 2025-04-04T19:43:55.758Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-6027 vulnerable 2026-06-08 05:14:08.719932 Details available
Cross-site request forgery (CSRF) vulnerability in WP Spell Check 7.1.9 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.
Published: 2019-12-26T15:16:50.000Z
Updated: 2024-08-04T20:16:23.754Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.