CVE · Medium

CVE-2015-9357 — Akismet Anti-spam: Spam Protection [akismet] < 3.1.5

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2015-9357 Akismet Anti-spam: Spam Protection [akismet] < 3.1.5 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Medium 6.1 < 3.1.5 3.1.5 2015-10-13

CVE-2015-9357

The Akismet Anti-spam plugin for WordPress versions 2.5.0 through 3.1.4 contains an unauthenticated stored cross-site scripting vulnerability that allows attackers to inject malicious scripts without requiring user authentication.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.