Skip to content
OpenAdvisories

Vendor

cleantalk

14 known vulnerabilities.

Products

Spam protection, Honeypot, Anti-Spam by CleanTalk 4 Login Security, FireWall, Malware removal by CleanTalk 4 CleanTalk AntiSpam 2 CleanTalk Anti-Spam – Complete Spam Protection 1 Spam protection, AntiSpam, FireWall by CleanTalk 1 Security & Malware scan by CleanTalk 1 Anti-Spam by CleanTalk – Spam Protection Without CAPTCHA 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 9.3
    CVE-2026-66593

    WordPress Security & Malware scan by CleanTalk plugin <= 2.184 - SQL Injection vulnerability

    Unauthenticated SQL Injection in Security & Malware scan by CleanTalk <= 2.184 versions.

    cleantalk Security & Malware scan by CleanTalk
  • Critical 9.8
    CVE-2026-1490

    Spam protection, Honeypot, Anti-Spam by CleanTalk <= 6.71 - Authorization Bypass via Reverse DNS (PTR record) Spoofing to Unauthenticated Arbitrary Plugin Installation

    The Spam protection, Anti-Spam, FireWall by CleanTalk plugin for WordPress is vulnerable to unauthorized Arbitrary Plugin Installation due to an authorization bypass via reverse DNS (PTR record) spoofing on the 'checkWithoutToken' function in all versions up …

    cleantalk Spam protection, Honeypot, Anti-Spam by CleanTalk Web / CMS
  • Critical 9.8
    CVE-2024-13365

    Security & Malware scan by CleanTalk <= 2.149 - Unauthenticated Arbitrary File Upload

    The Security & Malware scan by CleanTalk plugin for WordPress is vulnerable to arbitrary file uploads due to the plugin uploading and extracting .zip archives when scanning them for malware through the checkUploadedArchive() function in all versions up to, an…

    cleantalk Login Security, FireWall, Malware removal by CleanTalk Web / CMS
  • Critical 9.8
    CVE-2024-10542 Public exploit EPSS 15%

    Spam protection, Anti-Spam, FireWall by CleanTalk <= 6.43.2 - Authorization Bypass via Reverse DNS Spoofing to Unauthenticated Arbitrary Plugin Installation

    The Spam protection, Anti-Spam, FireWall by CleanTalk plugin for WordPress is vulnerable to unauthorized Arbitrary Plugin Installation due to an authorization bypass via reverse DNS spoofing on the checkWithoutToken function in all versions up to, and includi…

    cleantalk Spam protection, Honeypot, Anti-Spam by CleanTalk Web / CMS