Approved changes feed: RSS · Atom

cpe:2.3:a:tomroyal:stop_registration_spam:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorTomroyal (d0627345-2833-5194-a1ec-8ae7f7680bbb)
ProductStop Registration Spam (22d6f728-2aab-5f99-800d-1dac569f67b1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-32564 vulnerable 2026-06-08 07:19:00.262855 WordPress Stop Registration Spam Plugin <= 1.24 - Reflected Cross Site Scripting (XSS) vulnerability
HIGH (7.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tomroyal Stop Registration Spam allows Reflected XSS. This issue affects Stop Registration Spam: from n/a through 1.24.
Published: 2025-04-17T15:47:28.798Z
Updated: 2026-04-28T16:12:24.292Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-12219 vulnerable 2026-06-08 06:23:51.462533 Stop Registration Spam <= 1.23 - Cross-Site Request Forgery to Cross-Site Scripting
MEDIUM (6.1)
The Stop Registration Spam plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.23. This is due to missing or incorrect nonce validation. This makes it possible for unauthenticated attackers to inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. CVE-2024-56017 is likely a duplicate of this issue.
Published: 2024-12-17T07:23:15.247Z
Updated: 2026-04-08T16:44:11.057Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.