Read the docs

cleantalk

Records24All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical4CVSS 9.0–10.0
CVSS high14CVSS 7.0–8.9

Exploited now

cleantalk records in CISA KEV

No cleantalk vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Anti-spam 5 records HIGH Spam Protection, Antispam, Firewall 5 records HIGH Security & Malware Scan 3 records MEDIUM Antispam 2 records LOW

Records

5 records in Anti-spam · all components

TI-2024-09765 CVE-2024-10542 · GHSA-r694-88f4-27hq

Missing authorization in cleantalk Spam protection, Honeypot, Anti-Spam by CleanTalk

Priority HIGH 65

The Spam protection, Anti-Spam, FireWall by CleanTalk plugin for WordPress is vulnerable to unauthorized Arbitrary Plugin Installation due to an authorization bypass via reverse DNS spoofing on the checkWithoutToken func…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.15364 Published 2024-11-26 No fix listed CWE-862
TI-2023-28342 CVE-2023-51696 · GHSA-3mgm-628r-4cx7

Cross-site request forgery in СleanTalk - Anti-Spam Protection Spam protection…

Priority LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in СleanTalk - Anti-Spam Protection Spam protection, Anti-Spam, FireWall by CleanTalk.This issue affects Spam protection, Anti-Spam, FireWall by CleanTalk: from n/a through…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00241 Published 2024-02-29 No fix listed CWE-352
TI-2021-06423 CVE-2021-24131 · GHSA-hv83-f95q-qg45

Anti-Spam by CleanTalk < 5.149 - Multiple Authenticated SQL Injections

Priority LOW 35

Unvalidated input in the Anti-Spam by CleanTalk WordPress plugin, versions before 5.149, lead to multiple authenticated SQL injection vulnerabilities, however, it requires high privilege user (admin+).

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01444 Published 2021-03-18 Fixed in 5.149 CWE-89
Open these records in search →