Vulnerabilities in CleanTalk
9 resultsVexday analysis
CleanTalk apresenta 2 vulnerabilidades registradas na base, ambas de baixa severidade (nenhuma crítica), com fraqueza dominante em cross-site scripting (CWE-79). Nenhuma das vulnerabilidades está sob exploração ativa conhecida (KEV), e não há registros de publicação nos últimos 90 dias, indicando um perfil de risco estável e sem pressão imediata.
CVE-2024-10542CRITICALSpam protection, Anti-Spam, FireWall by CleanTalk <= 6.43.2 - Authorization Bypass via Reverse DNS Spoofing to Unauthenticated Arbitrary Plugin InstallationEPSS 15.2%CVE-2024-10781HIGHSpam protection, Anti-Spam, FireWall by CleanTalk <= 6.44 - Authorization Bypass due to Missing Empty Value Check to Unauthenticated Arbitrary Plugin InstallationEPSS 3.8%CVE-2022-28222MEDIUMCleanTalk AntiSpam <= 5.173 Reflected XSSEPSS 2.9%CVE-2022-28221MEDIUMCleanTalk AntiSpam <= 5.173 Reflected XSSEPSS 2.3%CVE-2024-13365CRITICALSecurity & Malware scan by CleanTalk <= 2.149 - Unauthenticated Arbitrary File UploadEPSS 1.6%CVE-2026-1490CRITICALSpam protection, Honeypot, Anti-Spam by CleanTalk <= 6.71 - Authorization Bypass via Reverse DNS (PTR record) Spoofing to Unauthenticated Arbitrary Plugin InstallationEPSS 1.2%CVE-2020-36698HIGHSecurity & Malware scan by CleanTalk <= 2.50 - Missing AuthorizationEPSS 1.0%CVE-2024-10570HIGHSecurity & Malware scan by CleanTalk <= 2.145 - Authorization Bypass via Reverse DNS Spoofing to Unauthenticated SQL InjectionEPSS 0.5%CVE-2025-13604HIGHLogin Security, FireWall, Malware removal by CleanTalk <= 2.168 - Unauthenticated Stored Cross-Site Scripting via Page URLEPSS 0.3%