CVE-2025-9888

Name of the Vulnerable Software and Affected Versions: Maspik – Ultimate Spam Protection plugin for WordPress versions through 2.5.6

Description: The Maspik – Ultimate Spam Protection plugin for WordPress is susceptible to a Cross-Site Request Forgery issue. This is due to insufficient or incorrect nonce validation within the clear log function. An unauthenticated attacker could potentially clear all spam logs by forging a request, provided they can trick a site administrator into performing an action.

Recommendations: Update Maspik – Ultimate Spam Protection plugin for WordPress to a version beyond 2.5.6.