WordPress plugin
Zero Spam for WordPress security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 7 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical1
- High4
- Medium2
- Low0
All Zero Spam for WordPress vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| High7.2 | Unauthenticated Stored Cross-Site Scripting via Nested POST Array Keys via Contact Form 7 Integration ≤5.7.10Update to 5.7.11 | CVE-2026-96752 | |
| High7.2 | Authenticated (Administrator+) SQL Injection ≤5.4.4Update to 5.4.5 | CVE-2023-32121 | |
| High7.2 | Authenticated(Administrator+) SQL Injection <5.4.5Update to 5.4.5 | — | |
| High7.2 | Admin+ SQL Injection ≤5.2.10Update to 5.2.11 | CVE-2022-0254 | |
| Critical9.8 | SQL Injection ≤2.1.1Update to 2.2.0 | — |
- High7.2Unauthenticated Stored Cross-Site Scripting via Nested POST Array Keys via Contact Form 7 Integration
≤5.7.10Update to 5.7.11
- High7.2Authenticated (Administrator+) SQL Injection
≤5.4.4Update to 5.4.5
- High7.2Authenticated(Administrator+) SQL Injection
<5.4.5Update to 5.4.5
- High7.2Admin+ SQL Injection
≤5.2.10Update to 5.2.11
- Critical9.8SQL Injection
≤2.1.1Update to 2.2.0
Zero Spam for WordPress: common questions
Does Zero Spam for WordPress have known vulnerabilities?
Yes. VulnCrest Radar lists 7 known vulnerabilities in Zero Spam for WordPress: 1 critical, 4 high, 2 medium. None are known to affect version null.
How do I check which version of Zero Spam for WordPress I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Zero Spam for WordPress vulnerability?
CVE-2026-105057, published Oct 5, 2026: Zero Spam for WordPress <= 5.7.11 - Unauthenticated Spam Protection Bypass on Login. Severity: Medium (CVSS 5.3).
Is any Zero Spam for WordPress vulnerability listed in CISA KEV?
No. None of the known Zero Spam for WordPress vulnerabilities is currently listed in the CISA KEV catalog.