Skip to content
OpenAdvisories
High · 7.2 CVE-2022-3302 EUVD-2022-42692GHSA-xxmh-c24j-hmf3

Anti-Spam by CleanTalk < 5.185.1 - Admin+ SQLi

Published Oct 25, 2022 · Updated May 9, 2025 · Assigned by WPScan

Description

The Spam protection, AntiSpam, FireWall by CleanTalk WordPress plugin before 5.185.1 does not validate ids before using them in a SQL statement, which could lead to SQL injection exploitable by high privilege users such as admin

Affected products

VendorProductAffectedFixed
— Spam protection, AntiSpam, FireWall by CleanTalk 5.185.1 – < 5.185.1 5.185.1

References