{“error”:0,”message”:null,”data”:{“name”:”Akismet Anti-spam: Spam Protection”,”plugin”:”akismet”,”link”:”https:\/\/wordpress.org\/plugins\/akismet\/”,”latest”:”1752603420″,”closed”:0,”vulnerability”:[{“uuid”:”599736412235f8149428e49269918571f1aef1b7400ae68739f35fd0d4852bde”,”name”:”Akismet Anti-spam: Spam Protection [akismet] < 3.1.5","description":null,"operator":{"min_version":null,"min_operator":null,"max_version":"3.1.5","max_operator":"lt","unfixed":"0","closed":"0"},"source":[{"id":"CVE-2015-9357","name":"CVE-2015-9357","link":"https:\/\/www.cve.org\/CVERecord?id=CVE-2015-9357","description":"[en] The akismet plugin before 3.1.5 for WordPress has XSS.","date":"2019-08-28"},{"id":"1a2f3094-5970-4251-9ed0-ec595a0cd26c","name":"Akismet 2.5.0-3.1.4 – Unauthenticated Stored Cross-Site Scripting (XSS)","link":"https:\/\/wpscan.com\/vulnerability\/1a2f3094-5970-4251-9ed0-ec595a0cd26c","description":"The Akismet WordPress plugin, between versions 2.5.0 and 3.1.4, was found to be affected by an Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability.","date":null},{"id":"43fa9c4f35bb4d6ae8a365106106de889fa987cc","name":"Akismet <= 3.1.4 – Cross-Site Scripting","link":"https:\/\/www.wordfence.com\/threat-intel\/vulnerabilities\/wordpress-plugins\/akismet\/akismet-314-cross-site-scripting","description":"The akismet plugin before 3.1.5 for WordPress has XSS.","date":"2015-10-13"}],"impact":{"cwe":[{"cwe":"CWE-79","name":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","description":"The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users."}]}},{"uuid":"9f5a44b44a64825c95789528822082a4484afedd970880a2ec450fec8ec7feae","name":"Akismet Anti-spam: Spam Protection [akismet] < 2.0.2","description":null,"operator":{"min_version":null,"min_operator":null,"max_version":"2.0.2","max_operator":"lt","unfixed":"0","closed":"0"},"source":[{"id":"CVE-2007-2714","name":"CVE-2007-2714","link":"https:\/\/www.cve.org\/CVERecord?id=CVE-2007-2714","description":"[en] Unspecified vulnerability in akismet.php in Matt Mullenweg Akismet before 2.0.2, a WordPress plugin, has unknown impact and attack vectors.","date":"2007-05-16"},{"id":"7ddbcc07e75b04524a724123d64fcf91091ccaef","name":"WordPress Akismet Plugin <= 2.0.1 – Unspecified vulnerability","link":"https:\/\/patchstack.com\/database\/wordpress\/plugin\/akismet\/vulnerability\/wordpress-akismet-plugin-2-0-1-unspecified-vulnerability","description":"There are unknown impact and attack vectors in this WordPress plugin.","date":"2007-05-15"},{"id":"2b54167951599c4460b6b903a6c3dc88a1d5e438","name":"Akismet Spam Protection < 2.0.2 – Cross-Site Scripting","link":"https:\/\/www.wordfence.com\/threat-intel\/vulnerabilities\/wordpress-plugins\/akismet\/akismet-spam-protection-202-cross-site-scripting","description":"The Akismet Spam Protection plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the _wp_http_referer\u2019 parameter in versions before 2.0.2 due to insufficient input sanitization and output escaping. This makes it possible for attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.","date":"2007-05-14"}],"impact":[]},{"uuid":"7c991982251bc36e9fa5b7383a2f194ef62cdf583cf27c06451bb6e0f58b428a","name":"Akismet Anti-spam: Spam Protection [akismet] < 3.1.5","description":null,"operator":{"min_version":null,"min_operator":null,"max_version":"3.1.5","max_operator":"lt","unfixed":"0","closed":"0"},"source":[{"id":"45fc4bc9adf1cc8e11476439de3c12993b217b18","name":"WordPress Akismet Plugin <= 3.1.4 – Cross Site Scripting","link":"https:\/\/patchstack.com\/database\/wordpress\/plugin\/akismet\/vulnerability\/wordpress-akismet-plugin-3-1-4-cross-site-scripting","description":"Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code.\nUpdate the plugin.","date":"2015-10-13"}],"impact":[]},{"uuid":"ea90e885ae84589ef865948e1d2f6c15c7a791094e148f643ad2809d8b8c96f1","name":"Akismet Anti-spam: Spam Protection [akismet] < 1.1","description":null,"operator":{"min_version":null,"min_operator":null,"max_version":"1.1","max_operator":"lt","unfixed":"0","closed":"0"},"source":[{"id":"a26fd0604329dc01f7b66bc6a25d6bc9d138e799","name":"WordPress Akismet Plugin – Multiple Cross Site Scripting Vulnerabilities","link":"https:\/\/patchstack.com\/database\/wordpress\/plugin\/akismet\/vulnerability\/wordpress-akismet-plugin-multiple-cross-site-scripting-vulnerabilities","description":"WordPress Akismet plugin is prone to multiple cross-site scripting vulnerabilities. It fails to properly clean up user-supplied input. An attacker may execute arbitrary script code in the browser of an user in the context of the affected site. In this way the attacker can steal cookie-based authentication credentials. Other attacks are also possible.\nUpdate the plugin.","date":"2012-10-01"}],"impact":[]}]},"updated":"1749708795"}