Wpmaspik

5 CVEs in 2 Wpmaspik products, including Maspik, Lenix Leads Collector. Newest: CVE-2024-9182 (2025-05-15). Severity, EPSS and public exploits for each.

Wpmaspik products with known CVEs

ProductCVEs
Maspik4
Lenix Leads Collector1
Wpmaspik CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2024-9182Medium4.82025-05-15The Maspik WordPress plugin before 2.1.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Cr…
CVE-2025-1039High7.22025-02-20The Lenix Elementor Leads addon plugin for WordPress is vulnerable to Stored Cross-Site Scripting via a URL form field in all versions up to, and including, 1…
CVE-2024-25101Medium5.92024-03-13Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in yonifre Maspik – Spam Blacklist allows Stored XSS.This is…
CVE-2023-48272High7.12023-11-30Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in yonifre Maspik – Spam Blacklist allows Stored XSS.This is…
CVE-2023-24008Medium4.32023-05-26Cross-Site Request Forgery (CSRF) vulnerability in yonifre Maspik – Spam Blacklist plugin <= 0.7.8 versions.