The SpamBam plugin for WordPress allows remote attackers to bypass restrictions and add blog comments by using server-supplied values to calculate a shared key.Referenceshttp://securityreason.com/securityalert/4438http://www.securityfocus.com/bid/27291http://www.securityfocus.com/archive/1/486333/100/200/threadedhttps://exchange.xforce.ibmcloud.com/vulnerabilities/39690