Skip to content
Threat Feed
Subscribe

Product

Zero Spam for WordPress (<= 5.7.10)

1 brief RSS
high advisory

Stored XSS in Zero Spam for WordPress Plugin

An unauthenticated Stored Cross-Site Scripting vulnerability in Zero Spam for WordPress (CVE-2026-96752) allows attackers to inject malicious scripts into logs via nested POST array keys in Contact Form 7 submissions.

Zero Spam for WordPress web-application xss wordpress cve-2026-96752
2t 1c