CVE-2008-4616: The Spanner Spambam Plugin

Medium severity, CVSS 5.0. EPSS: 7.3% chance of exploitation in the next 30 days.

The SpamBam plugin for WordPress allows remote attackers to bypass restrictions and add blog comments by using server-supplied values to calculate a shared key.

Affected products

• The Spanner Spambam Plugin: any version
• WordPress Spambam Plugin: any version

Published 2008-10-20. Last modified 2026-06-16.