← WordPress Vulnerabilities
WordPress security by component

Spacer

Spacer is a WordPress component with 2 published CVE records in this archive. The latest tracked vulnerability was published Jan 07, 2025; the highest CVE/CNA score is 4.8.

Plugin slug: spacer

CVE-2024-10527: Spacer: A security weakness

Spacer is affected by a security weakness. Exploitation requires at least subscriber-level access. The resulting impact depends on how the affected component exposes the vulnerable operation.

PublishedJan 07, 2025
Safe version guidanceSee mitigation notes
Safe version
Jan 07, 2025 CVE-2024-10527
Spacer: A security weakness
Spacer is affected by a security weakness. Exploitation requires at least subscriber-level access. The resulting impact depends on how the affected component exposes the vulnerable operation.
See mitigation notes
CVE3.1
NVDPending
Nov 21, 2022 CVE-2022-3618
Spacer: Cross-site scripting
Spacer is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
See mitigation notes
CVE4.8
NVD4.8