cleantalk records
16 published records for vendor cleantalk.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 4
- With a fix record
- 31.3%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')5
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')4
- CWE-862 Missing Authorization2
- CWE-352 Cross-Site Request Forgery (CSRF)2
- CWE-703 Improper Check or Handling of Exceptional Conditions1
- CWE-434 Unrestricted Upload of File with Dangerous Type1
The weakness classes this vendor ships most often: where to look.
CWEAll records
16 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
39Monitor | CVE-2024-13365No exploit | Security & Malware scan by CleanTalk <= 2.149 - Unauthenticated Arbitrary File Uploadcleantalk · security \& malware scan · CWE-434 | Critical9.8 | — | 1.5% | Feb 12, 2025 |
35Monitor | CVE-2024-10542Proof of concept | Spam protection, Anti-Spam, FireWall by CleanTalk <= 6.43.2 - Authorization Bypass via Reverse DNS Spoofing to Unauthenticated Arbitrary Plugin Installationcleantalk · anti-spam · CWE-862 | High7.5 | — | 15.3% | Nov 26, 2024 |
35Monitor | CVE-2020-36698No exploit | Security & Malware scan by CleanTalk <= 2.50 - Missing Authorizationcleantalk · security \& malware scan · CWE-862 | High8.8 | — | 0.9% | Oct 20, 2023 |
35Monitor | CVE-2023-51696No exploit | WordPress Spam protection, AntiSpam, FireWall by CleanTalk Plugin <= 6.20 is vulnerable to Cross Site Request Forgery (CSRF)cleantalk · anti-spam · CWE-352 | High8.8 | — | 0.2% | Feb 29, 2024 |
35Monitor | CVE-2023-51535No exploit | WordPress Spam protection, AntiSpam, FireWall by CleanTalk Plugin <= 6.20 is vulnerable to Cross Site Request Forgery (CSRF)cleantalk · spam protection\, antispam\, firewall · CWE-352 | High8.8 | — | 0.2% | Jan 5, 2024 |
31Monitor | CVE-2021-24295Proof of concept | Time-based Blind SQL Injection in Spam protection, AntiSpam, FireWall by CleanTalk < 5.153.4cleantalk · spam protection\, antispam\, firewall · CWE-89 | High7.5 | — | 4.6% | May 17, 2021 |
31Monitor | CVE-2024-10781No exploit | Spam protection, Anti-Spam, FireWall by CleanTalk <= 6.44 - Authorization Bypass due to Missing Empty Value Check to Unauthenticated Arbitrary Plugin Installaticleantalk · spam protection\, antispam\, firewall · CWE-703 | High7.5 | — | 3.7% | Nov 26, 2024 |
30Monitor | CVE-2023-5239No exploit | Security & Malware scan by CleanTalk < 2.121 - IP Spoofingcleantalk · security \& malware scan · CWE-290 | High7.5 | — | 0.6% | Nov 27, 2023 |
30Monitor | CVE-2024-10570No exploit | Security & Malware scan by CleanTalk <= 2.145 - Authorization Bypass via Reverse DNS Spoofing to Unauthenticated SQL Injectioncleantalk · login security, firewall, malware removal by cleantalk · CWE-89 | High7.5 | — | 0.5% | Nov 26, 2024 |
28Monitor | CVE-2021-24131No exploit | Anti-Spam by CleanTalk < 5.149 - Multiple Authenticated SQL Injectionscleantalk · anti-spam · CWE-89 | High7.2 | — | 1.4% | Mar 18, 2021 |
28Monitor | CVE-2022-3302No exploit | Anti-Spam by CleanTalk < 5.185.1 - Admin+ SQLicleantalk · spam protection\, antispam\, firewall · CWE-89 | High7.2 | — | 1.1% | Oct 25, 2022 |
25Monitor | CVE-2022-28222No exploit | CleanTalk AntiSpam <= 5.173 Reflected XSScleantalk · antispam · CWE-79 | Medium6.1 | — | 2.9% | Apr 19, 2022 |
25Monitor | CVE-2022-28221No exploit | CleanTalk AntiSpam <= 5.173 Reflected XSScleantalk · antispam · CWE-79 | Medium6.1 | — | 2.3% | Apr 19, 2022 |
24Monitor | CVE-2019-17515No exploit | The CleanTalk cleantalk-spam-protect plugin before 5.127.4 for WordPress is affected by: Cross Site Scripting (XSS).cleantalk · spam protection\, antispam\, firewall · CWE-79 | Medium6.1 | — | 1.3% | Nov 13, 2019 |
24Monitor | CVE-2026-10770No exploit | Anti-Spam by CleanTalk - Moderately critical - Cross site scripting - SA-CONTRIB-2026-042cleantalk · anti-spam · CWE-79 | Medium6.1 | — | 0.2% | Jul 10, 2026 |
18Monitor | CVE-2026-3213No exploit | Anti-Spam by CleanTalk - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-014cleantalk · anti-spam · CWE-79 | Medium4.7 | — | 0.2% | Mar 25, 2026 |
- CVE-2024-1336539Monitor
Security & Malware scan by CleanTalk <= 2.149 - Unauthenticated Arbitrary File Upload
CriticalCVSS 9.8No exploitEPSS 1%cleantalk · security \& malware scanFeb 12, 2025
- CVE-2024-1054235Monitor
Spam protection, Anti-Spam, FireWall by CleanTalk <= 6.43.2 - Authorization Bypass via Reverse DNS Spoofing to Unauthenticated Arbitrary Plugin Installation
HighCVSS 7.5Proof of conceptEPSS 15%cleantalk · anti-spamNov 26, 2024
- CVE-2020-3669835Monitor
Security & Malware scan by CleanTalk <= 2.50 - Missing Authorization
HighCVSS 8.8No exploitEPSS 0%cleantalk · security \& malware scanOct 20, 2023
- CVE-2023-5169635Monitor
WordPress Spam protection, AntiSpam, FireWall by CleanTalk Plugin <= 6.20 is vulnerable to Cross Site Request Forgery (CSRF)
HighCVSS 8.8No exploitEPSS 0%cleantalk · anti-spamFeb 29, 2024
- CVE-2023-5153535Monitor
WordPress Spam protection, AntiSpam, FireWall by CleanTalk Plugin <= 6.20 is vulnerable to Cross Site Request Forgery (CSRF)
HighCVSS 8.8No exploitEPSS 0%cleantalk · spam protection\, antispam\, firewallJan 5, 2024
- CVE-2021-2429531Monitor
Time-based Blind SQL Injection in Spam protection, AntiSpam, FireWall by CleanTalk < 5.153.4
HighCVSS 7.5Proof of conceptEPSS 4%cleantalk · spam protection\, antispam\, firewallMay 17, 2021
- CVE-2024-1078131Monitor
Spam protection, Anti-Spam, FireWall by CleanTalk <= 6.44 - Authorization Bypass due to Missing Empty Value Check to Unauthenticated Arbitrary Plugin Installati
HighCVSS 7.5No exploitEPSS 3%cleantalk · spam protection\, antispam\, firewallNov 26, 2024
- CVE-2023-523930Monitor
Security & Malware scan by CleanTalk < 2.121 - IP Spoofing
HighCVSS 7.5No exploitEPSS 0%cleantalk · security \& malware scanNov 27, 2023
- CVE-2024-1057030Monitor
Security & Malware scan by CleanTalk <= 2.145 - Authorization Bypass via Reverse DNS Spoofing to Unauthenticated SQL Injection
HighCVSS 7.5No exploitEPSS 0%cleantalk · login security, firewall, malware removal by cleantalkNov 26, 2024
- CVE-2021-2413128Monitor
Anti-Spam by CleanTalk < 5.149 - Multiple Authenticated SQL Injections
HighCVSS 7.2No exploitEPSS 1%cleantalk · anti-spamMar 18, 2021
- CVE-2022-330228Monitor
Anti-Spam by CleanTalk < 5.185.1 - Admin+ SQLi
HighCVSS 7.2No exploitEPSS 1%cleantalk · spam protection\, antispam\, firewallOct 25, 2022
- CVE-2022-2822225Monitor
CleanTalk AntiSpam <= 5.173 Reflected XSS
MediumCVSS 6.1No exploitEPSS 2%cleantalk · antispamApr 19, 2022
- CVE-2022-2822125Monitor
CleanTalk AntiSpam <= 5.173 Reflected XSS
MediumCVSS 6.1No exploitEPSS 2%cleantalk · antispamApr 19, 2022
- CVE-2019-1751524Monitor
The CleanTalk cleantalk-spam-protect plugin before 5.127.4 for WordPress is affected by: Cross Site Scripting (XSS).
MediumCVSS 6.1No exploitEPSS 1%cleantalk · spam protection\, antispam\, firewallNov 13, 2019
- CVE-2026-1077024Monitor
Anti-Spam by CleanTalk - Moderately critical - Cross site scripting - SA-CONTRIB-2026-042
MediumCVSS 6.1No exploitEPSS 0%cleantalk · anti-spamJul 10, 2026
- CVE-2026-321318Monitor
Anti-Spam by CleanTalk - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-014
MediumCVSS 4.7No exploitEPSS 0%cleantalk · anti-spamMar 25, 2026