High severity · published Nov 26, 2024
CVE-2024-10542
Spam protection, Anti-Spam, FireWall by CleanTalk <= 6.43.2 - Authorization Bypass via Reverse DNS Spoofing to Unauthenticated Arbitrary Plugin Installation
7.5
CVSS
15.4%
EPSS
No
On KEV
Description
The Spam protection, Anti-Spam, FireWall by CleanTalk plugin for WordPress is vulnerable to unauthorized Arbitrary Plugin Installation due to an authorization bypass via reverse DNS spoofing on the checkWithoutToken function in all versions up to, and including, 6.43.2. This makes it possible for unauthenticated attackers to install and activate arbitrary plugins which can be leveraged to achieve remote code execution if another vulnerable plugin is installed and activated.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
High
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)15.4% · higher than 97% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SP
Spam protection, Honeypot, Anti-Spam by CleanTalk · cleantalk
through 6.43.2 · source: vendor
AN
Anti-spam · Cleantalk
before 6.44 · source: NVD
AN
Antispam · Cleantalk
through 6.43.2 · source: CISA
Affected product
SP
Spam protection, Honeypot, Anti-Spam by CleanTalk
cleantalk
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-10542
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-10542
Product
https://plugins.trac.wordpress.org/browser/cleantalk-spam-protect/tags/6.43.2/lib/Cleantalk/ApbctWP/RemoteCalls.php#L41
Patch
https://plugins.trac.wordpress.org/changeset/3179819/cleantalk-spam-protect#file631
Third Party Advisory
https://www.wordfence.com/threat-intel/vulnerabilities/id/d7eb5fad-bb62-4f0b-ad52-b16c3e442b62?source=cve
More from Spam protection, Honeypot, Anti-Spam by CleanTalk
9.8
CVE-2026-1490
Spam protection, Honeypot, Anti-Spam by CleanTalk <= 6.71 - Authorization Bypass via Reverse DNS (PTR record) Spoofing to Unauthenticated Arbitrary Plugin Installation
7.5
CVE-2024-10781
Spam protection, Anti-Spam, FireWall by CleanTalk <= 6.44 - Authorization Bypass due to Missing Empty Value Check to Unauthenticated Arbitrary Plugin Installation
7.2
CVE-2026-77830
Spam protection, Honeypot, Anti-Spam by CleanTalk <= 6.86 - Unauthenticated Stored Cross-Site Scripting via Comment Content aria-label Placeholder