1. Home
  2. CVE Database
  3. CVE-2022-1663
MEDIUM · 6.5

CVE-2022-1663

The Stop Spam Comments WordPress plugin through 0.2.1.2 does not properly generate the Javascript access token for preventing abuse of comment section, allowing threat authors to easily collect the va...

Vulnerability Description

The Stop Spam Comments WordPress plugin through 0.2.1.2 does not properly generate the Javascript access token for preventing abuse of comment section, allowing threat authors to easily collect the value and add it to the request.

CVSS Score

6.5

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
LOW
Integrity
LOW
Availability
NONE

Affected Products

VendorProductVersions
Stop Spam Comments ProjectStop Spam Comments<= 0.2.1.2

Related Weaknesses (CWE)

CWE-200

References

FAQ

What is CVE-2022-1663?

CVE-2022-1663 is a vulnerability with a CVSS score of 6.5 (MEDIUM). The Stop Spam Comments WordPress plugin through 0.2.1.2 does not properly generate the Javascript access token for preventing abuse of comment section, allowing threat authors to easily collect the va...

How severe is CVE-2022-1663?

CVE-2022-1663 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2022-1663?

Check the references section above for vendor advisories and patch information. Affected products include: Stop Spam Comments Project Stop Spam Comments.