Anti-Spam by CleanTalk – Spam Protection Without CAPTCHA

Уязвимости

• CVE-2026-1490без авторизации≤ 6.71

  Spam protection, Honeypot, Anti-Spam by CleanTalk <= 6.71 - Authorization Bypass via Reverse DNS (PTR record) Spoofing to Unauthenticated Arbitrary Plugin Insta

  Критич. 9.8

• CVE-2023-51696без авторизации · нужен клик≤ 6.20

  WordPress Spam protection, AntiSpam, FireWall by CleanTalk Plugin <= 6.20 is vulnerable to Cross Site Request Forgery (CSRF)

  Высокий 8.8

• CVE-2023-51535без авторизации · нужен клик≤ 6.20

  WordPress Spam protection, AntiSpam, FireWall by CleanTalk Plugin <= 6.20 is vulnerable to Cross Site Request Forgery (CSRF)

  Высокий 8.8

• CVE-2023-33996нужен вход≤ 6.10

  WordPress Spam protection, AntiSpam, FireWall by CleanTalk plugin <= 6.10 - Broken Access Control vulnerability

  Высокий 8.8

• CVE-2024-10781без авторизации≤ 6.44

  Spam protection, Anti-Spam, FireWall by CleanTalk <= 6.44 - Authorization Bypass due to Missing Empty Value Check to Unauthenticated Arbitrary Plugin Installati

  Высокий 7.5

• CVE-2024-10542без авторизации≤ 6.43.2

  Spam protection, Anti-Spam, FireWall by CleanTalk <= 6.43.2 - Authorization Bypass via Reverse DNS Spoofing to Unauthenticated Arbitrary Plugin Installation

  Высокий 7.5

• CVE-2026-77830без авторизации≤ 6.86

  Spam protection, Honeypot, Anti-Spam by CleanTalk <= 6.86 - Unauthenticated Stored Cross-Site Scripting via Comment Content aria-label Placeholder

  Высокий 7.2

• CVE-2026-65437без авторизации · нужен клик≤ 6.82

  WordPress Spam protection, AntiSpam, FireWall by CleanTalk plugin <= 6.82 - Cross Site Scripting (XSS) vulnerability

  Высокий 7.1

• CVE-2019-17515без авторизации · нужен клик

  The CleanTalk cleantalk-spam-protect plugin before 5.127.4 for WordPress is affected by: Cross Site Scripting (XSS).

  Средний 6.1