FV Antispam

FV Antispam has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it is fixed as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for FV Antispam has a vendor fix available, so running the current release closes it.

All of these findings were reported by Skalucy. FV Antispam is installed on roughly 900 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.8.8.

Strategic Overview

Avg CVSSMedium
6.1/ 10
Patch Coverage100%
Open

0

Fixed

1

Get automatic notifications for all FV Antispam vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.1CVE-2025-66102

FV Antispam <= 2.7 - Reflected Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records
Showing 1–1 of 1 reports
Plugin Profile
Latestv2.8
3.7(3)
74/100
Last Updated
2025-11-11 (10mo ago)
Active Installs
900+
Downloads
63,392
Requires WP
3.5+
Requires PHP
0+
Tested up to
WP 6.8.8
Created
2010-09-10 (16y ago)

FV Antispam is a powerful and simple antispam plugin. FV Antispam moves any spambot (machine written) comments directly to the trash and allows Akismet to just deal with human spam. What makes FV Antispam better than any other solution is the very low CPU load. FV Antispam will not burden your hosting or slow down your server. Other effective antispam plugins may get your hosting cancelled. Really. It happened to us, that’s why we wrote FV Antispam. The Problem Our studies on our own sites have shown that for every 50 human spam comments a popular weblog will have up to 10,000 machine generated spam. With FV Antispam, Akismet finally becomes a usefull tool again allowing you to browse your spam folder and pull out any Akismet false positives. If you use just Akismet, bots fill your whole spam folder with thousands of comments. It’s nearly an impossible task to browse through hundreds or thousands of comments to find one or two false positives. Why choose FV AntiSpam? Dead simple. Just install, turn on and go. FV Antispam doesn’t need configuration. No redundant and dangerous options or cryptic choices. Effective. Reliable. Zero false positives. Virtually no CPU server load. Works with the most powerful WordPress form processor – Filled In. Utilizes Akismet for it as well if installed. Allows you to enter custom questions for extra protection. How does FV AntiSpam work so well? No detectable signature for spam bots Blacklisted comments are put into trash The spam is moved directly to trash Spam pings and trackbacks are moved directly into trash if detected by Akismet Works hand in hand with Akismet, not trying to replace the collective system but supplement it. Stops only the machine spam Doesn’t stop human spam which Akismet will move to spam folder. Keeps the spam folder almost empty so you can quickly go through the spam folder to rescue any Akismet false positives. This is impossible without FV Antispam as the spam folder of any popular site would have thousands of bot posted spam every week or even every day. Support and more information

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C