Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

5 records

Vendor: cleantalk Component: Anti-spam Clear all filters
TI-2024-09765 CVE-2024-10542 · GHSA-r694-88f4-27hq

Missing authorization in cleantalk Spam protection, Honeypot, Anti-Spam by CleanTalk

Priority HIGH 65

The Spam protection, Anti-Spam, FireWall by CleanTalk plugin for WordPress is vulnerable to unauthorized Arbitrary Plugin Installation due to an authorization bypass via reverse DNS spoofing on the checkWithoutToken func…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.15364 Published 2024-11-26 No fix listed CWE-862
TI-2023-28342 CVE-2023-51696 · GHSA-3mgm-628r-4cx7

Cross-site request forgery in СleanTalk - Anti-Spam Protection Spam protection…

Priority LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in СleanTalk - Anti-Spam Protection Spam protection, Anti-Spam, FireWall by CleanTalk.This issue affects Spam protection, Anti-Spam, FireWall by CleanTalk: from n/a through…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00241 Published 2024-02-29 No fix listed CWE-352
TI-2021-06423 CVE-2021-24131 · GHSA-hv83-f95q-qg45

Anti-Spam by CleanTalk < 5.149 - Multiple Authenticated SQL Injections

Priority LOW 35

Unvalidated input in the Anti-Spam by CleanTalk WordPress plugin, versions before 5.149, lead to multiple authenticated SQL injection vulnerabilities, however, it requires high privilege user (admin+).

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01444 Published 2021-03-18 Fixed in 5.149 CWE-89