CL
Vendor
Cleantalk
28
CVEs
0
On KEV
2
New 30D
Products
AB5.4
Anti-Spam by CleanTalk – Spam Protection Without CAPTCHA
cleantalk
1 CVEs0 on KEV1 new
CA7.2
CleanTalk Anti-Spam – Complete Spam Protection
cleantalk
1 CVEs0 on KEV1 new
AN8.8
Anti-spam
Cleantalk
5 CVEs0 on KEV0 new
AN7.5
Antispam
Cleantalk
5 CVEs0 on KEV0 new
SP8.8
Spam Protection, Antispam, Firewall
Cleantalk
5 CVEs0 on KEV0 new
LS9.8
Login Security, FireWall, Malware removal by CleanTalk
cleantalk
4 CVEs0 on KEV0 new
SP9.8
Spam protection, Honeypot, Anti-Spam by CleanTalk
cleantalk
4 CVEs0 on KEV0 new
SM9.8
Security & Malware Scan
Cleantalk
3 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-109198 New | CA CleanTalk Anti-Spam – Complete Spam Protection cleantalk | 7.2 | Oct 23 | Anti-Spam by CleanTalk <= 6.89.1 - Unauthenticated Stored Cross-Site Scripting via 'user_email' Registration Parameter |
| CVE-2026-103424 | AB Anti-Spam by CleanTalk – Spam Protection Without CAPTCHA cleantalk | 5.4 | Oct 10 | Anti-Spam by CleanTalk <= 6.88 - Unauthenticated Stored Cross-Site Scripting via Comment Content via ContactsEncoder Greedy Regex |
| CVE-2026-77830 | SP Spam protection, Honeypot, Anti-Spam by CleanTalk cleantalk | 7.2 | Sep 5 | Spam protection, Honeypot, Anti-Spam by CleanTalk <= 6.86 - Unauthenticated Stored Cross-Site Scripting via Comment Content aria-label Placeholder |
| CVE-2026-10770 | AN Anti-spam Cleantalk | 6.1 | Jul 10 | Anti-Spam by CleanTalk - Moderately critical - Cross site scripting - SA-CONTRIB-2026-042 |
| CVE-2026-3213 | AN Anti-spam Cleantalk | 4.7 | Mar 25 | Anti-Spam by CleanTalk - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-014 |
| CVE-2026-1490 | SP Spam protection, Honeypot, Anti-Spam by CleanTalk cleantalk | 9.8 | Feb 15 | Spam protection, Honeypot, Anti-Spam by CleanTalk <= 6.71 - Authorization Bypass via Reverse DNS (PTR record) Spoofing to Unauthenticated Arbitrary Plugin Installation |
| CVE-2025-13604 | LS Login Security, FireWall, Malware removal by CleanTalk cleantalk | 7.2 | Dec 9 | Login Security, FireWall, Malware removal by CleanTalk <= 2.168 - Unauthenticated Stored Cross-Site Scripting via Page URL |
| CVE-2024-13365 | LS Login Security, FireWall, Malware removal by CleanTalk cleantalk | 9.8 | Feb 12 | Security & Malware scan by CleanTalk <= 2.149 - Unauthenticated Arbitrary File Upload |
| CVE-2024-10542 | SP Spam protection, Honeypot, Anti-Spam by CleanTalk cleantalk | 7.5 | Nov 26 | Spam protection, Anti-Spam, FireWall by CleanTalk <= 6.43.2 - Authorization Bypass via Reverse DNS Spoofing to Unauthenticated Arbitrary Plugin Installation |
| CVE-2024-10781 | SP Spam protection, Honeypot, Anti-Spam by CleanTalk cleantalk | 7.5 | Nov 26 | Spam protection, Anti-Spam, FireWall by CleanTalk <= 6.44 - Authorization Bypass due to Missing Empty Value Check to Unauthenticated Arbitrary Plugin Installation |
| CVE-2024-10570 | LS Login Security, FireWall, Malware removal by CleanTalk cleantalk | 7.5 | Nov 26 | Security & Malware scan by CleanTalk <= 2.145 - Authorization Bypass via Reverse DNS Spoofing to Unauthenticated SQL Injection |
| CVE-2023-51696 | AN Anti-spam Cleantalk | 8.8 | Feb 29 | WordPress Spam protection, AntiSpam, FireWall by CleanTalk Plugin <= 6.20 is vulnerable to Cross Site Request Forgery (CSRF) |
| CVE-2023-51535 | SP Spam Protection, Antispam, Firewall Cleantalk | 8.8 | Jan 5 | WordPress Spam protection, AntiSpam, FireWall by CleanTalk Plugin <= 6.20 is vulnerable to Cross Site Request Forgery (CSRF) |
| CVE-2023-5239 | SM Security & Malware Scan Cleantalk | 7.5 | Nov 27 | Security & Malware scan by CleanTalk < 2.121 - IP Spoofing |
| CVE-2020-36698 | LS Login Security, FireWall, Malware removal by CleanTalk cleantalk | 8.8 | Oct 20 | Security & Malware scan by CleanTalk <= 2.50 - Missing Authorization |
| CVE-2022-3302 | SP Spam Protection, Antispam, Firewall Cleantalk | 7.2 | Oct 25 | Anti-Spam by CleanTalk < 5.185.1 - Admin+ SQLi |
| CVE-2022-28222 | AN Antispam Cleantalk | 6.1 | Apr 19 | The CleanTalk AntiSpam plugin <= 5.173 for WordPress is vulnerable to Reflected Cross-Site Scripting (XSS) via the $_REQUEST['page'] parameter… |
| CVE-2022-28221 | AN Antispam Cleantalk | 6.1 | Apr 19 | The CleanTalk AntiSpam plugin <= 5.173 for WordPress is vulnerable to Reflected Cross-Site Scripting (XSS) via the $_REQUEST['page'] parameter… |
| CVE-2021-24295 | SP Spam Protection, Antispam, Firewall Cleantalk | 7.5 | May 17 | It was possible to exploit an Unauthenticated Time-Based Blind SQL Injection vulnerability in the Spam protection, AntiSpam, FireWall by CleanTalk WordPress Plugin before 5.153.4 |
| CVE-2021-24131 | AN Anti-spam Cleantalk | 7.2 | Mar 18 | Unvalidated input in the Anti-Spam by CleanTalk WordPress plugin, versions before 5.149, lead to multiple authenticated SQL injection vulnerabilities, however, it requires high… |
| CVE-2019-17515 | SP Spam Protection, Antispam, Firewall Cleantalk | 6.1 | Nov 13 | The CleanTalk cleantalk-spam-protect plugin before 5.127.4 for WordPress is affected by: Cross Site Scripting (XSS) |