Skip to content
OpenAdvisories

Vendor

cleantalk

14 known vulnerabilities.

Products

Spam protection, Honeypot, Anti-Spam by CleanTalk 4 Login Security, FireWall, Malware removal by CleanTalk 4 CleanTalk AntiSpam 2 CleanTalk Anti-Spam – Complete Spam Protection 1 Spam protection, AntiSpam, FireWall by CleanTalk 1 Security & Malware scan by CleanTalk 1 Anti-Spam by CleanTalk – Spam Protection Without CAPTCHA 1
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 7.2
    CVE-2026-109198

    Anti-Spam by CleanTalk <= 6.89.1 - Unauthenticated Stored Cross-Site Scripting via 'user_email' Registration Parameter

    The Anti-Spam by CleanTalk – Spam Protection Without CAPTCHA plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'user_email' parameter in all versions up to, and including, 6.89.1 due to insufficient input sanitization and output escapi…

    cleantalk CleanTalk Anti-Spam – Complete Spam Protection Web / CMS
  • High 7.2
    CVE-2026-77830

    Spam protection, Honeypot, Anti-Spam by CleanTalk <= 6.86 - Unauthenticated Stored Cross-Site Scripting via Comment Content aria-label Placeholder

    The Spam protection, Honeypot, Anti-Spam by CleanTalk plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content aria-label Placeholder in all versions up to, and including, 6.86 due to insufficient input sanitization and output esc…

    cleantalk Spam protection, Honeypot, Anti-Spam by CleanTalk Web / CMS
  • High 7.1
    CVE-2026-65437

    WordPress Spam protection, AntiSpam, FireWall by CleanTalk plugin <= 6.82 - Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in Spam protection, AntiSpam, FireWall by CleanTalk <= 6.82 versions.

    cleantalk Spam protection, AntiSpam, FireWall by CleanTalk
  • High 7.2
    CVE-2025-13604

    Login Security, FireWall, Malware removal by CleanTalk <= 2.168 - Unauthenticated Stored Cross-Site Scripting via Page URL

    The Login Security, FireWall, Malware removal by CleanTalk plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the page URL in all versions up to, and including, 2.168 due to insufficient input sanitization and output escaping. This makes it…

    cleantalk Login Security, FireWall, Malware removal by CleanTalk Web / CMS
  • High 8.1
    CVE-2024-10781

    Spam protection, Anti-Spam, FireWall by CleanTalk <= 6.44 - Authorization Bypass due to Missing Empty Value Check to Unauthenticated Arbitrary Plugin Installation

    The Spam protection, Anti-Spam, FireWall by CleanTalk plugin for WordPress is vulnerable to unauthorized Arbitrary Plugin Installation due to an missing empty value check on the 'api_key' value in the 'perform' function in all versions up to, and including, 6…

    cleantalk Spam protection, Honeypot, Anti-Spam by CleanTalk Web / CMS
  • High 7.5
    CVE-2024-10570

    Security & Malware scan by CleanTalk <= 2.145 - Authorization Bypass via Reverse DNS Spoofing to Unauthenticated SQL Injection

    The Security & Malware scan by CleanTalk plugin for WordPress is vulnerable to unauthorized SQL Injection due to an authorization bypass via reverse DNS spoofing on the checkWithoutToken function in all versions up to, and including, 2.145, as well as insuffi…

    cleantalk Login Security, FireWall, Malware removal by CleanTalk Web / CMS
  • High 8.8
    CVE-2020-36698

    Security & Malware scan by CleanTalk <= 2.50 - Missing Authorization

    The Security & Malware scan by CleanTalk plugin for WordPress is vulnerable to unauthorized user interaction in versions up to, and including, 2.50. This is due to missing capability checks on several AJAX actions and nonce disclosure in the source page of th…

    cleantalk Login Security, FireWall, Malware removal by CleanTalk Web / CMS