Cleantalk Spam Protection, Antispam, Firewall — known CVE vulnerabilities

Every CVE whose affected-product data names Cleantalk Spam Protection, Antispam, Firewall, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2024-10781 — CVSS 8.1 (high): The Spam protection, Anti-Spam, FireWall by CleanTalk plugin for WordPress is vulnerable to unauthorized Arbitrary Plugin Installation due…
• CVE-2021-24295 — CVSS 7.5 (high): It was possible to exploit an Unauthenticated Time-Based Blind SQL Injection vulnerability in the Spam protection, AntiSpam, FireWall by…
• CVE-2022-3302 — CVSS 7.2 (high): The Spam protection, AntiSpam, FireWall by CleanTalk WordPress plugin before 5.185.1 does not validate ids before using them in a SQL…
• CVE-2019-17515 — CVSS 6.1 (medium): The CleanTalk cleantalk-spam-protect plugin before 5.127.4 for WordPress is affected by: Cross Site Scripting (XSS). The impact is: Allows…
• CVE-2023-51535 — CVSS 4.3 (medium): Cross-Site Request Forgery (CSRF) vulnerability in СleanTalk - Anti-Spam Protection Spam protection, Anti-Spam, FireWall by CleanTalk.This…