← WordPress Vulnerabilities
WordPress security by component

Maspik

Maspik is a WordPress component with 7 published CVE records in this archive. The latest tracked vulnerability was published Sep 10, 2025; the highest CVE/CNA score is 7.1.

Plugin slug: contact-forms-anti-spam

CVE-2025-9979: Maspik: A security weakness

Maspik is affected by a security weakness. Exploitation requires at least subscriber-level access. The resulting impact depends on how the affected component exposes the vulnerable operation.

PublishedSep 10, 2025
Safe version guidanceSee mitigation notes
Safe version
Sep 10, 2025 CVE-2025-9979
Maspik: A security weakness
Maspik is affected by a security weakness. Exploitation requires at least subscriber-level access. The resulting impact depends on how the affected component exposes the vulnerable operation.
See mitigation notes
CVE4.3
NVDPending
Sep 10, 2025 CVE-2025-9888
Maspik – Ultimate Spam Protection: Cross-site request forgery
Maspik – Ultimate Spam Protection is affected by cross-site request forgery. The vulnerable path is reachable without authentication. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.
See mitigation notes
CVE4.3
NVDPending
Dec 06, 2024 CVE-2024-53806
Maspik – Spam blacklist: A security weakness
Maspik – Spam blacklist is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
See mitigation notes
CVE5.4
NVDPending
Jun 04, 2024 CVE-2023-48271
Maspik – Spam blacklist: Privilege escalation or authentication bypass
Maspik – Spam blacklist is affected by privilege escalation or authentication bypass. Exposure depends on how the affected operation is made reachable by the site. A successful request can grant permissions or access that the caller should not possess.
See mitigation notes
CVE5.3
NVDPending
Mar 13, 2024 CVE-2024-25101
Maspik – Spam Blacklist: Cross-site scripting
Maspik – Spam Blacklist is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
See mitigation notes
CVE5.9
NVD4.8
Nov 30, 2023 CVE-2023-48272
Maspik – Spam Blacklist: Cross-site scripting
Maspik – Spam Blacklist is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
See mitigation notes
CVE7.1
NVD6.1
May 26, 2023 CVE-2023-24008
Contact Forms Anti Spam: Cross-site request forgery
Contact Forms Anti Spam is affected by cross-site request forgery. Exposure depends on how the affected operation is made reachable by the site. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.
See mitigation notes
CVE4.3
NVD8.8