Yonifre

11 CVEs across 4 Yonifre products. Browse Yonifre vulnerabilities, severities, and proof-of-concept exploits.

Yonifre products with known CVEs

ProductCVEs
Maspik – Spam Blacklist6
Lenix Scss Compiler2
Maspik – Ultimate Spam Protection2
Lenix Leads Collector1
Yonifre CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-28003High7.12026-08-13Unauthenticated Cross Site Scripting (XSS) in Maspik – Spam blacklist <= 2.9.1 versions.
CVE-2025-60145Medium4.32025-09-26Cross-Site Request Forgery (CSRF) vulnerability in yonifre Lenix scss compiler lenix-scss-compiler allows Cross Site Request Forgery.This issue affects Lenix s…
CVE-2025-60144Medium5.92025-09-26Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in yonifre Lenix scss compiler lenix-scss-compiler allows St…
CVE-2025-9979Medium4.32025-09-10The Maspik plugin for WordPress is vulnerable to Missing Authorization in version 2.5.6 and prior. This is due to missing capability checks on the Maspik_spaml…
CVE-2025-9888Medium4.32025-09-10The Maspik – Ultimate Spam Protection plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.5.6. This is due…
CVE-2025-1039High7.22025-02-20The Lenix Elementor Leads addon plugin for WordPress is vulnerable to Stored Cross-Site Scripting via a URL form field in all versions up to, and including, 1…
CVE-2024-53806Medium5.42024-12-06Missing Authorization vulnerability in yonifre Maspik – Spam blacklist contact-forms-anti-spam allows Exploiting Incorrectly Configured Access Control Security…
CVE-2023-48271Medium5.32024-06-04Authentication Bypass by Spoofing vulnerability in yonifre Maspik – Spam blacklist allows Accessing Functionality Not Properly Constrained by ACLs.This issue a…
CVE-2024-25101Medium5.92024-03-13Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in yonifre Maspik – Spam Blacklist allows Stored XSS.This is…
CVE-2023-48272High7.12023-11-30Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in yonifre Maspik – Spam Blacklist allows Stored XSS.This is…
CVE-2023-24008Medium4.32023-05-26Cross-Site Request Forgery (CSRF) vulnerability in yonifre Maspik – Spam Blacklist plugin <= 0.7.8 versions.