High · 8.8 CVE-2023-33996 EUVD-2023-38120GHSA-xrx7-h3p9-h3r6

WordPress Spam protection, AntiSpam, FireWall by CleanTalk plugin <= 6.10 - Broken Access Control vulnerability

Published Dec 13, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: СleanTalk - Anti-Spam Protection Product: Spam protection, AntiSpam, FireWall by CleanTalk

Description

Missing Authorization vulnerability in СleanTalk - Anti-Spam Protection Spam protection, AntiSpam, FireWall by CleanTalk allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Spam protection, AntiSpam, FireWall by CleanTalk: from n/a through 6.10.

Affected products

Vendor	Product	Affected	Fixed
СleanTalk - Anti-Spam Protection	Spam protection, AntiSpam, FireWall by CleanTalk	≤ 6.10	—

References

https://patchstack.com/database/wordpress/plugin/cleantalk-spam-protect/vulnerability/wordpress-spam-protection-antispam-firewall-by-cleantalk-plugin-6-10-broken-access-control-vulnerability?_s_id=cve vdb-entry