Vulnerabilities in cleantalk
9 resultsVexday analysis
CleanTalk apresenta 7 vulnerabilidades catalogadas, das quais 3 são críticas, predominantemente relacionadas a falhas de autorização (CWE-862). Nenhuma vulnerabilidade está sendo explorada ativamente conforme registros KEV, e não há descobertas recentes nos últimos 90 dias, sugerindo que o risco é histórico e estável. A fraqueza estrutural em controle de acesso merece atenção em avaliações de segurança, mas a ausência de exploração ativa mitiga a urgência imediata.
CVE-2024-10542CRITICALSpam protection, Anti-Spam, FireWall by CleanTalk <= 6.43.2 - Authorization Bypass via Reverse DNS Spoofing to Unauthenticated Arbitrary Plugin InstallationEPSS 15.2%CVE-2024-10781HIGHSpam protection, Anti-Spam, FireWall by CleanTalk <= 6.44 - Authorization Bypass due to Missing Empty Value Check to Unauthenticated Arbitrary Plugin InstallationEPSS 3.8%CVE-2022-28222MEDIUMCleanTalk AntiSpam <= 5.173 Reflected XSSEPSS 2.9%CVE-2022-28221MEDIUMCleanTalk AntiSpam <= 5.173 Reflected XSSEPSS 2.3%CVE-2024-13365CRITICALSecurity & Malware scan by CleanTalk <= 2.149 - Unauthenticated Arbitrary File UploadEPSS 1.6%CVE-2026-1490CRITICALSpam protection, Honeypot, Anti-Spam by CleanTalk <= 6.71 - Authorization Bypass via Reverse DNS (PTR record) Spoofing to Unauthenticated Arbitrary Plugin InstallationEPSS 1.2%CVE-2020-36698HIGHSecurity & Malware scan by CleanTalk <= 2.50 - Missing AuthorizationEPSS 1.0%CVE-2024-10570HIGHSecurity & Malware scan by CleanTalk <= 2.145 - Authorization Bypass via Reverse DNS Spoofing to Unauthenticated SQL InjectionEPSS 0.5%CVE-2025-13604HIGHLogin Security, FireWall, Malware removal by CleanTalk <= 2.168 - Unauthenticated Stored Cross-Site Scripting via Page URLEPSS 0.3%