Skip to contentCleantalk Anti-spam vulnerabilities
- cleantalk anti-spam – complete spam protectionAnti-Spam by CleanTalk <= 6.89.1 - Unauthenticated Stored Cross-Site Scripting via 'user_email' Registration ParameterCVE-2026-1091987.2 High
- cleantalk anti-spam by cleantalk – spam protection without captchaAnti-Spam by CleanTalk <= 6.88 - Unauthenticated Stored Cross-Site Scripting via Comment Content via ContactsEncoder Greedy RegexCVE-2026-1034245.4 Medium
- cleantalk spam protection, honeypot, anti-spam by cleantalkSpam protection, Honeypot, Anti-Spam by CleanTalk <= 6.86 - Unauthenticated Stored Cross-Site Scripting via Comment Content aria-label PlaceholderCVE-2026-778307.2 High
- cleantalk anti-spam, drupal anti-spam by cleantalk +1 moreAnti-Spam by CleanTalk - Moderately critical - Cross site scripting - SA-CONTRIB-2026-042CVE-2026-10770Fix available6.1 Medium
- cleantalk anti-spam, drupal anti-spam by cleantalk +1 moreAnti-Spam by CleanTalk - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-014CVE-2026-3213Fix available4.7 Medium
- cleantalk spam protection, honeypot, anti-spam by cleantalkSpam protection, Honeypot, Anti-Spam by CleanTalk <= 6.71 - Authorization Bypass via Reverse DNS (PTR record) Spoofing to Unauthenticated Arbitrary Plugin InstallationCVE-2026-14909.8 Critical
- cleantalk anti-spam, antispam, spam protection, honeypot, anti-spam by cleantalk +2 moreSpam protection, Anti-Spam, FireWall by CleanTalk <= 6.43.2 - Authorization Bypass via Reverse DNS Spoofing to Unauthenticated Arbitrary Plugin InstallationCVE-2024-10542Public exploitEPSS 15.4%9.8 Critical
- cleantalk antispam, spam protection, honeypot, anti-spam by cleantalk, spam protection\, antispam\, firewall +2 moreSpam protection, Anti-Spam, FireWall by CleanTalk <= 6.44 - Authorization Bypass due to Missing Empty Value Check to Unauthenticated Arbitrary Plugin InstallationCVE-2024-107818.1 High
- cleantalk anti-spam, spam protection, anti-spam, firewall by cleantalk +1 moreWordPress Spam protection, AntiSpam, FireWall by CleanTalk Plugin <= 6.20 is vulnerable to Cross Site Request Forgery (CSRF)CVE-2023-516964.3 Medium
- cleantalk spam protection, anti-spam, firewall by cleantalk, spam protection\, antispam\, firewall +1 moreWordPress Spam protection, AntiSpam, FireWall by CleanTalk Plugin <= 6.20 is vulnerable to Cross Site Request Forgery (CSRF)CVE-2023-515354.3 Medium
- cleantalk anti-spam, drupal anti-spam by cleantalk +1 moreAnti-Spam by CleanTalk < 5.149 - Multiple Authenticated SQL InjectionsCVE-2021-241317.2 High