Skip to content
OpenAdvisories

Vendor

cleantalk

14 known vulnerabilities.

Products

Spam protection, Honeypot, Anti-Spam by CleanTalk 4 Login Security, FireWall, Malware removal by CleanTalk 4 CleanTalk AntiSpam 2 CleanTalk Anti-Spam – Complete Spam Protection 1 Spam protection, AntiSpam, FireWall by CleanTalk 1 Security & Malware scan by CleanTalk 1 Anti-Spam by CleanTalk – Spam Protection Without CAPTCHA 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.4
    CVE-2026-103424

    Anti-Spam by CleanTalk <= 6.88 - Unauthenticated Stored Cross-Site Scripting via Comment Content via ContactsEncoder Greedy Regex

    The Anti-Spam by CleanTalk – Spam Protection Without CAPTCHA plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' parameter in all versions up to, and including, 6.88 due to insufficient input sanitization and output escaping. T…

    cleantalk Anti-Spam by CleanTalk – Spam Protection Without CAPTCHA Web / CMS
  • Medium 6.1
    CVE-2022-28222

    CleanTalk AntiSpam <= 5.173 Reflected XSS

    The CleanTalk AntiSpam plugin <= 5.173 for WordPress is vulnerable to Reflected Cross-Site Scripting (XSS) via the $_REQUEST['page'] parameter in`/lib/Cleantalk/ApbctWP/FindSpam/ListTable/Users.php`

    cleantalk CleanTalk AntiSpam
  • Medium 6.1
    CVE-2022-28221

    CleanTalk AntiSpam <= 5.173 Reflected XSS

    The CleanTalk AntiSpam plugin <= 5.173 for WordPress is vulnerable to Reflected Cross-Site Scripting (XSS) via the $_REQUEST['page'] parameter in`/lib/Cleantalk/ApbctWP/FindSpam/ListTable/Comments.php`

    cleantalk CleanTalk AntiSpam