Akismet Anti-spam: Spam Protection
Akismet Anti-spam: Spam Protection has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2007 and 2015; all 2 are fixed as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10.
The most common weakness is Cross-Site Scripting, behind 2 of the records (100%).
Every one of the 2 issues recorded for Akismet Anti-spam: Spam Protection has a vendor fix available, so running the current release closes all known holes.
All of these findings were reported by David Kierznowski. Akismet Anti-spam: Spam Protection is installed on roughly 5,000,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.
CVE-2015-9357Akismet <= 3.1.4 - Cross-Site Scripting
Read the full analysisVulnerability Records

Akismet Anti-spam: Spam Protection
Author
Automattic
The best anti-spam protection to block spam comments and spam in a contact form. The most trusted antispam solution for WordPress and WooCommerce. Akismet checks your comments and contact form submissions against our global database of spam to prevent your site from publishing malicious content. You can review the comment spam it catches on your blog’s “Comments” admin screen. Major features in Akismet include: Automatically checks all comments and filters out the ones that look like spam. Each comment has a status history, so you can easily see which comments were caught or cleared by Akismet and which were spammed or unspammed by a moderator. URLs are shown in the comment body to reveal hidden or misleading links. Moderators can see the number of approved comments for each user. A discard feature that outright blocks the worst spam, saving you disk space and speeding up your site. PS: You’ll be prompted to get an Akismet.com API key to use it, once activated. Keys are free for personal blogs; paid subscriptions are available for businesses and commercial sites.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C