Cleantalk vulnerabilities

Products

• Anti-spam 5
• Antispam 5
• Spam Protection\, Antispam\, Firewall 5
• Login Security, Firewall, Malware Removal By Cleantalk 4
• Spam Protection, Honeypot, Anti-spam By Cleantalk 4
• Security \& Malware Scan 3
• Antispam 2
• Security & Malware Scan By Cleantalk 2
• Spam Protection, Anti-spam, Firewall By Cleantalk 2

Newest

• cleantalk anti-spam – complete spam protection Anti-Spam by CleanTalk <= 6.89.1 - Unauthenticated Stored Cross-Site Scripting via 'user_email' Registration Parameter CVE-2026-109198 7.2 HighOctober 23, 2026
• cleantalk anti-spam by cleantalk – spam protection without captcha Anti-Spam by CleanTalk <= 6.88 - Unauthenticated Stored Cross-Site Scripting via Comment Content via ContactsEncoder Greedy Regex CVE-2026-103424 5.4 MediumOctober 10, 2026
• cleantalk spam protection, honeypot, anti-spam by cleantalk Spam protection, Honeypot, Anti-Spam by CleanTalk <= 6.86 - Unauthenticated Stored Cross-Site Scripting via Comment Content aria-label Placeholder CVE-2026-77830 7.2 HighSeptember 5, 2026
• cleantalk security & malware scan by cleantalk WordPress Security & Malware scan by CleanTalk plugin <= 2.184 - SQL Injection vulnerability CVE-2026-66593 9.3 CriticalAugust 20, 2026
• cleantalk anti-spam, drupal anti-spam by cleantalk +1 more Anti-Spam by CleanTalk - Moderately critical - Cross site scripting - SA-CONTRIB-2026-042 CVE-2026-10770 Fix available 6.1 MediumJune 3, 2026
• cleantalk anti-spam, drupal anti-spam by cleantalk +1 more Anti-Spam by CleanTalk - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-014 CVE-2026-3213 Fix available 4.7 MediumFebruary 25, 2026
• cleantalk spam protection, honeypot, anti-spam by cleantalk Spam protection, Honeypot, Anti-Spam by CleanTalk <= 6.71 - Authorization Bypass via Reverse DNS (PTR record) Spoofing to Unauthenticated Arbitrary Plugin Installation CVE-2026-1490 9.8 CriticalFebruary 15, 2026
• cleantalk login security, firewall, malware removal by cleantalk Login Security, FireWall, Malware removal by CleanTalk <= 2.168 - Unauthenticated Stored Cross-Site Scripting via Page URL CVE-2025-13604 7.2 HighDecember 9, 2025
• cleantalk login security, firewall, malware removal by cleantalk, security \& malware scan +1 more Security & Malware scan by CleanTalk <= 2.149 - Unauthenticated Arbitrary File Upload CVE-2024-13365 9.8 CriticalFebruary 12, 2025
• cleantalk anti-spam, antispam, spam protection, honeypot, anti-spam by cleantalk +2 more Spam protection, Anti-Spam, FireWall by CleanTalk <= 6.43.2 - Authorization Bypass via Reverse DNS Spoofing to Unauthenticated Arbitrary Plugin Installation CVE-2024-10542 Public exploit EPSS 15.4% 9.8 CriticalNovember 26, 2024
• cleantalk antispam, spam protection, honeypot, anti-spam by cleantalk, spam protection\, antispam\, firewall +2 more Spam protection, Anti-Spam, FireWall by CleanTalk <= 6.44 - Authorization Bypass due to Missing Empty Value Check to Unauthenticated Arbitrary Plugin Installation CVE-2024-10781 8.1 HighNovember 26, 2024
• cleantalk antispam, login security, firewall, malware removal by cleantalk +1 more Security & Malware scan by CleanTalk <= 2.145 - Authorization Bypass via Reverse DNS Spoofing to Unauthenticated SQL Injection CVE-2024-10570 7.5 HighNovember 26, 2024
• cleantalk anti-spam, spam protection, anti-spam, firewall by cleantalk +1 more WordPress Spam protection, AntiSpam, FireWall by CleanTalk Plugin <= 6.20 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2023-51696 4.3 MediumFebruary 29, 2024
• cleantalk spam protection, anti-spam, firewall by cleantalk, spam protection\, antispam\, firewall +1 more WordPress Spam protection, AntiSpam, FireWall by CleanTalk Plugin <= 6.20 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2023-51535 4.3 MediumJanuary 5, 2024
• cleantalk security & malware scan by cleantalk, security \& malware scan +1 more Security & Malware scan by CleanTalk < 2.121 - IP Spoofing CVE-2023-5239 7.5 HighNovember 27, 2023
• cleantalk login security, firewall, malware removal by cleantalk, security \& malware scan +1 more Security & Malware scan by CleanTalk <= 2.50 - Missing Authorization CVE-2020-36698 8.8 HighOctober 20, 2023
• unknown spam protection, antispam, firewall by cleantalk, cleantalk spam protection\, antispam\, firewall +1 more Anti-Spam by CleanTalk < 5.185.1 - Admin+ SQLi CVE-2022-3302 7.2 HighOctober 25, 2022
• cleantalk antispam CleanTalk AntiSpam <= 5.173 Reflected XSS CVE-2022-28222 6.1 MediumApril 19, 2022
• cleantalk antispam CleanTalk AntiSpam <= 5.173 Reflected XSS CVE-2022-28221 6.1 MediumApril 19, 2022
• unknown spam protection, antispam, firewall by cleantalk, cleantalk spam protection\, antispam\, firewall +1 more Time-based Blind SQL Injection in Spam protection, AntiSpam, FireWall by CleanTalk < 5.153.4 CVE-2021-24295 7.5 HighMay 17, 2021
• cleantalk anti-spam, drupal anti-spam by cleantalk +1 more Anti-Spam by CleanTalk < 5.149 - Multiple Authenticated SQL Injections CVE-2021-24131 7.2 HighMarch 18, 2021
• cleantalk spam protection\, antispam\, firewall The CleanTalk cleantalk-spam-protect plugin before 5.127.4 for WordPress is affected by: Cross... CVE-2019-17515 6.1 MediumNovember 13, 2019