CVE-2022-1663

CVE-2022-1663: Stop Spam Comments <= 0.2.1.2 - Access Token Bypass

Vendor Unknown
Product Stop Spam Comments
Weakness CWE-200 · Info exposure
Published August 29, 2022
Last update August 3, 2024

CVSS base score

What the vulnerability does

01Description

The Stop Spam Comments WordPress plugin through 0.2.1.2 does not properly generate the Javascript access token for preventing abuse of comment section, allowing threat authors to easily collect the value and add it to the request.

Key dates

02Disclosure timeline

August 29, 2022 CVE published
August 3, 2024 Record updated