Cleantalk

Antispam

6 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.8

CVE-2023-33996

  • EPSS 0.66%
  • Veröffentlicht 13.12.2024 15:15:14
  • Zuletzt bearbeitet 13.12.2024 15:15:14

Missing Authorization vulnerability in СleanTalk - Anti-Spam Protection Spam protection, AntiSpam, FireWall by CleanTalk allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Spam protection, AntiSpam, FireWall by...

7.5

CVE-2024-10781

  • EPSS 3.56%
  • Veröffentlicht 26.11.2024 06:15:08
  • Zuletzt bearbeitet 12.07.2025 00:24:01

The Spam protection, Anti-Spam, FireWall by CleanTalk plugin for WordPress is vulnerable to unauthorized Arbitrary Plugin Installation due to an missing empty value check on the 'api_key' value in the 'perform' function in all versions up to, and inc...

7.5

CVE-2024-10542

  • EPSS 40.97%
  • Veröffentlicht 26.11.2024 06:15:07
  • Zuletzt bearbeitet 12.07.2025 00:25:44

The Spam protection, Anti-Spam, FireWall by CleanTalk plugin for WordPress is vulnerable to unauthorized Arbitrary Plugin Installation due to an authorization bypass via reverse DNS spoofing on the checkWithoutToken function in all versions up to, an...

7.5

CVE-2024-10570

  • EPSS 0.1%
  • Veröffentlicht 26.11.2024 06:15:07
  • Zuletzt bearbeitet 26.11.2024 06:15:07

The Security & Malware scan by CleanTalk plugin for WordPress is vulnerable to unauthorized SQL Injection due to an authorization bypass via reverse DNS spoofing on the checkWithoutToken function in all versions up to, and including, 2.145, as well a...

6.1

CVE-2022-28221

  • EPSS 1.2%
  • Veröffentlicht 19.04.2022 21:15:18
  • Zuletzt bearbeitet 21.11.2024 06:56:58

The CleanTalk AntiSpam plugin <= 5.173 for WordPress is vulnerable to Reflected Cross-Site Scripting (XSS) via the $_REQUEST['page'] parameter in`/lib/Cleantalk/ApbctWP/FindSpam/ListTable/Comments.php`

6.1

CVE-2022-28222

Exploit
  • EPSS 0.35%
  • Veröffentlicht 19.04.2022 21:15:18
  • Zuletzt bearbeitet 21.11.2024 06:56:58

The CleanTalk AntiSpam plugin <= 5.173 for WordPress is vulnerable to Reflected Cross-Site Scripting (XSS) via the $_REQUEST['page'] parameter in`/lib/Cleantalk/ApbctWP/FindSpam/ListTable/Users.php`