Stop Spammers Classic

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   Stop Spammers Classic

Information

Software Type Plugin
Software Slug stop-spammer-registrations-plugin (view on wordpress.org)
Software Status Active
Software Author webguyio
Software Website damspam.com
Software Downloads 2,645,739
Software Active Installs 30,000
Software Record Last Updated July 16, 2026

9 Vulnerabilities

Submit a Vulnerability
Stop Spammers Classic <= 2026.3 - Unauthenticated Stored Cross-Site Scripting
7.2
CVE-2026-48876
Jun 1, 2026
Researcher: Peleg Nagli (ultrared.ai)
Stop Spammers Classic <= 2026.1 - Cross-Site Request Forgery via Email Allowlist
4.3
CVE-2025-14795
Jan 27, 2026
Researcher: JoanClarke2
Anti-Spam: Spam Protection | Block Spam Users, Comments, Forms <= 2024.7 - Cross-Site Request Forgery to Multiple Administrative Actions
5.4
CVE-2025-2935
Jun 5, 2025
Researcher: Noah Stead (TurtleBurg)
Stop Spammers Security | Block Spam Users, Comments, Forms <= 2024.4 - Cross-Site Request Forgery (CSRF) via sfs_process
5.4
CVE-2023-7065
May 3, 2024
Researcher: Lucio Sá
Stop Spammers Security <= 2022.6 - Authenticated (Admin+) Stored Cross-Site Scripting
4.4
CVE-2023-2489
May 15, 2023
Researcher: Erwan LR
Stop Spammers Security <= 2022.6 - Reflected Cross-Site Scripting
6.1
CVE-2023-2488
May 15, 2023
Researcher: Erwan LR
Stop Spammers Security <= 2022.5 - Unauthenticated PHP Object Injection
9.8
CVE-2022-4120
Dec 5, 2022
Researcher: Seryeon Ham
Stop Spammers Security <= 2021.17 - Authenticated (Admin+) Stored Cross-Site Scripting
4.8
CVE-2021-24517
Aug 9, 2021
Researcher: swapnil subhash bodekar
Stop Spammers <= 2021.8 - Reflected Cross-Site Scripting
6.1
CVE-2021-24245
Apr 8, 2021
Researcher: Hosein_vita
Title Status CVE ID CVSS Researchers Date
Stop Spammers Classic <= 2026.3 - Unauthenticated Stored Cross-Site Scripting Patched CVE-2026-48876 7.2 Peleg Nagli (ultrared.ai) June 1, 2026
Stop Spammers Classic <= 2026.1 - Cross-Site Request Forgery via Email Allowlist Patched CVE-2025-14795 4.3 JoanClarke2 January 27, 2026
Anti-Spam: Spam Protection | Block Spam Users, Comments, Forms <= 2024.7 - Cross-Site Request Forgery to Multiple Administrative Actions Patched CVE-2025-2935 5.4 Noah Stead (TurtleBurg) June 5, 2025
Stop Spammers Security | Block Spam Users, Comments, Forms <= 2024.4 - Cross-Site Request Forgery (CSRF) via sfs_process Patched CVE-2023-7065 5.4 Lucio Sá May 3, 2024
Stop Spammers Security <= 2022.6 - Authenticated (Admin+) Stored Cross-Site Scripting Patched CVE-2023-2489 4.4 Erwan LR May 15, 2023
Stop Spammers Security <= 2022.6 - Reflected Cross-Site Scripting Patched CVE-2023-2488 6.1 Erwan LR May 15, 2023
Stop Spammers Security <= 2022.5 - Unauthenticated PHP Object Injection Patched CVE-2022-4120 9.8 Seryeon Ham December 5, 2022
Stop Spammers Security <= 2021.17 - Authenticated (Admin+) Stored Cross-Site Scripting Patched CVE-2021-24517 4.8 swapnil subhash bodekar August 9, 2021
Stop Spammers <= 2021.8 - Reflected Cross-Site Scripting Patched CVE-2021-24245 6.1 Hosein_vita April 8, 2021

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation