Vulnerabilities / Zero Spam for WordPress
Zero Spam for WordPress vulnerabilities
Advisories WPSec published for Zero Spam for WordPress. Other sources may list more. Its attack surface: Zero Spam for WordPress on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-06 | WPSEC-2026-0475 | Zero Spam for WordPress <= 5.7.11 - Unauthenticated Country Block Bypass via 'CF-IPCountry' and 'X-Forwarded-Country' Headers | Low 3.7 | 5.7.12 |
| 2026-10-06 | WPSEC-2026-0474 | Zero Spam for WordPress <= 5.7.11 - Unauthenticated Login Protection Bypass via 'woocommerce-login-nonce' and 'pp_current_url' Parameters | Medium 5.3 | 5.7.12 |
License: CC BY 4.0