Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

5 records

Vendor: cleantalk Component: Spam Protection, Antispam, Firewall Clear all filters
TI-2024-09993 CVE-2024-10781 · GHSA-m52x-q4c4-72qw

Spam protection, Anti-Spam, FireWall by CleanTalk <= 6.44 - Authorization Bypass due to…

Priority MEDIUM 44

The Spam protection, Anti-Spam, FireWall by CleanTalk plugin for WordPress is vulnerable to unauthorized Arbitrary Plugin Installation due to an missing empty value check on the 'api_key' value in the 'perform' function…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.03713 Published 2024-11-26 No fix listed CWE-703
TI-2023-28187 CVE-2023-51535 · GHSA-mf62-7364-m8fq

Cross-site request forgery in СleanTalk - Anti-Spam Protection Spam protection…

Priority LOW 39

Cross-Site Request Forgery (CSRF) vulnerability in СleanTalk - Anti-Spam Protection Spam protection, Anti-Spam, FireWall by CleanTalk.This issue affects Spam protection, Anti-Spam, FireWall by CleanTalk: from n/a through…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00227 Published 2024-01-05 No fix listed CWE-352
TI-2022-03051 CVE-2022-3302 · GHSA-xxmh-c24j-hmf3

Anti-Spam by CleanTalk < 5.185.1 - Admin+ SQLi

Priority HIGH 67

The Spam protection, AntiSpam, FireWall by CleanTalk WordPress plugin before 5.185.1 does not validate ids before using them in a SQL statement, which could lead to SQL injection exploitable by high privilege users such…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01339 Published 2022-10-25 Fixed in 5.185.1 CWE-89