Read the docs

cleantalk

Records24All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical4CVSS 9.0–10.0
CVSS high14CVSS 7.0–8.9

Exploited now

cleantalk records in CISA KEV

No cleantalk vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Anti-spam 5 records HIGH Spam Protection, Antispam, Firewall 5 records HIGH Security & Malware Scan 3 records MEDIUM Antispam 2 records LOW

Records

5 records in Spam Protection, Antispam, Firewall · all components

TI-2022-03051 CVE-2022-3302 · GHSA-xxmh-c24j-hmf3

Anti-Spam by CleanTalk < 5.185.1 - Admin+ SQLi

Priority HIGH 67

The Spam protection, AntiSpam, FireWall by CleanTalk WordPress plugin before 5.185.1 does not validate ids before using them in a SQL statement, which could lead to SQL injection exploitable by high privilege users such…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01339 Published 2022-10-25 Fixed in 5.185.1 CWE-89
TI-2024-09993 CVE-2024-10781 · GHSA-m52x-q4c4-72qw

Spam protection, Anti-Spam, FireWall by CleanTalk <= 6.44 - Authorization Bypass due to…

Priority MEDIUM 44

The Spam protection, Anti-Spam, FireWall by CleanTalk plugin for WordPress is vulnerable to unauthorized Arbitrary Plugin Installation due to an missing empty value check on the 'api_key' value in the 'perform' function…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.03713 Published 2024-11-26 No fix listed CWE-703
TI-2023-28187 CVE-2023-51535 · GHSA-mf62-7364-m8fq

Cross-site request forgery in СleanTalk - Anti-Spam Protection Spam protection…

Priority LOW 39

Cross-Site Request Forgery (CSRF) vulnerability in СleanTalk - Anti-Spam Protection Spam protection, Anti-Spam, FireWall by CleanTalk.This issue affects Spam protection, Anti-Spam, FireWall by CleanTalk: from n/a through…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00227 Published 2024-01-05 No fix listed CWE-352
Open these records in search →