A vulnerability described as critical has been identified in OOPSpam Anti-Spam Plugin up to 1.2.53 on WordPress. Affected by this vulnerability is an unknown functionality of the component Header Handler. Executing manipulation of the argument X-Forwarded-For can lead to an unknown weakness.

This vulnerability appears as CVE-2025-12094. The attack may be performed from remote. There is no available exploit.