WP Manifestindependent plugin directory
manifest / security / wp-stop-forum-spam-api

Wilcosky Stop Forum Spam API WP Registry grade A-. Low-severity findings · 1 findingWP RegistryLow-severity findings · 1 findingOpen the reportA-

Connect to Stop Forum Spam's API to block and/or report malicious IPs.

★ 1stars
1.2.2latest · 1 year ago

Install

Download source zip No release zip yet

This is the repository archive. It installs, but the folder name will carry the branch suffix and updates will not flow.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/zerosonesfun/wp-stop-forum-spam-api/archive/refs/heads/main.zip
No built-in updater. New versions won't appear under Dashboard → Updates. Install new releases yourself, or let Git Updater track the repository.

Connect to StopForumSpam's API to block and/or report malicious IPs.

Description

The WP Stop Forum Spam API plugin integrates with the StopForumSpam service to help protect your WordPress site from spam and malicious IPs. It allows you to check visitor IPs against the StopForumSpam database and take appropriate action.

What's New in Version 1.2

  • Added the / ?testsfs= query parameter for easier testing during development.

Features

  • Query the StopForumSpam database to identify spammy or malicious IPs.
  • Block IPs with a high confidence score.
  • Cache results for improved performance.
  • Easy testing with the / ?testsfs= query parameter.

Installation

  1. Download the plugin zip file from Releases.
  2. Upload the zip file to your WordPress site through the Plugins section in the admin dashboard.
  3. Activate the plugin.

Usage

The plugin works automatically once activated:

  • It checks visitor IPs against the StopForumSpam database.
  • Blocks IPs with a high confidence score (≥ 60%).

To test the plugin:

  1. Add /?testsfs=<IP> to your site's URL (replace <IP> with the IP address you want to test).
  2. View the results or debug any potential issues.

Changelog

1.2

  • Added the / ?testsfs= query parameter for testing.

1.1.7

  • Initial public release.

Releases

12 releases.

Tag
Published
1.2.2 latest
Apr 25, 2025 1 year ago
Apr 25, 2025 1 year ago
1.2
Apr 25, 2025 1 year ago
Apr 25, 2025 1 year ago
Apr 25, 2025 1 year ago
Apr 25, 2025 1 year ago
Apr 23, 2025 1 year ago
Apr 23, 2025 1 year ago
Apr 23, 2025 1 year ago
Apr 23, 2025 1 year ago
1.1
Apr 23, 2025 1 year ago
1.0
Apr 23, 2025 1 year ago

These releases are tags only. The author does not attach a packaged zip, so there are no download counts to report.

A- grade

Security

Wilcosky Stop Forum Spam API 1.2.2 · audited by WP Registry

Low-severity findings only.

1 low
Audited release
1.2.2
Findings
1
Worst severity
low
Content hash
ffd8c418dd1ab682fe3262a6…

Findings

  • low Public testsfs query parameter enables unauthenticated SFS probes

    unnecessary_attack_surface

    maybe_block_ip() allows any visitor to set ?testsfs=<IP>, causing the plugin to query StopForumSpam for that IP and cache the result. This is unnecessary attack surface (cache pollution / probing) though the upstream host is fixed.

    includes/class-checker.php:14-18

    Recommendation

    Restrict testsfs to manage_options users or remove it from production builds.

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.