CVE-2020-36698

🗓️ 20 Oct 2023 06:35:07Reported by WordfenceType

The CleanTalk plugin for WordPress (up to v2.50) allows authenticated attackers to delete/upload files

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2020-36698	20 Oct 202312:35	–	circl
CNNVD	WordPress Plugin Security & Malware scan by CleanTalk Security Breach	20 Oct 202300:00	–	cnnvd
Cvelist	CVE-2020-36698 Security & Malware scan by CleanTalk <= 2.50 - Missing Authorization	20 Oct 202306:35	–	cvelist
EUVD	EUVD-2020-24140	7 Oct 202500:30	–	euvd
NVD	CVE-2020-36698	20 Oct 202307:15	–	nvd
OSV	CVE-2020-36698	20 Oct 202307:15	–	osv
Patchstack	WordPress Security & Malware scan by CleanTalk Plugin <= 2.50 is vulnerable to Broken Access Control	23 Oct 202300:00	–	patchstack
Prion	Design/Logic Flaw	20 Oct 202307:15	–	prion
RedhatCVE	CVE-2020-36698	5 Feb 202515:07	–	redhatcve
Vulnrichment	CVE-2020-36698 Security & Malware scan by CleanTalk <= 2.50 - Missing Authorization	20 Oct 202306:35	–	vulnrichment

NVD

Vulners

Vulnrichment

Node

cleantalk security_&_malware_scanRange<2.51wordpress

[
  {
    "vendor": "cleantalk",
    "product": "Login Security, FireWall, Malware removal by CleanTalk",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "2.50",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
wpscan	www.wpscan.com/vulnerability/23960f42-dfc1-4951-9169-02d889283f01
blog	www.blog.nintechnet.com/multiple-vulnerabilities-fixed-in-security-malware-scan-by-cleantalk-plugin/
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/0fb9b039-eb04-4c27-89eb-1932c9c31962

08 Apr 2026 17:16Current

8.2High risk

Vulners AI Score8.2

CVSS 3.18.8

EPSS0.00261

SSVC

CWE-862