EUVD-2020-24140

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

CleanTalk plugin for WordPress is vulnerable to unauthorized user actions in versions up to 2.50

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2020-36698	20 Oct 202312:35	–	circl
CNNVD	WordPress Plugin Security & Malware scan by CleanTalk Security Breach	20 Oct 202300:00	–	cnnvd
CVE	CVE-2020-36698	20 Oct 202306:35	–	cve
Cvelist	CVE-2020-36698 Security & Malware scan by CleanTalk <= 2.50 - Missing Authorization	20 Oct 202306:35	–	cvelist
NVD	CVE-2020-36698	20 Oct 202307:15	–	nvd
OSV	CVE-2020-36698	20 Oct 202307:15	–	osv
Patchstack	WordPress Security & Malware scan by CleanTalk Plugin <= 2.50 is vulnerable to Broken Access Control	23 Oct 202300:00	–	patchstack
Prion	Design/Logic Flaw	20 Oct 202307:15	–	prion
RedhatCVE	CVE-2020-36698	5 Feb 202515:07	–	redhatcve
Vulnrichment	CVE-2020-36698 Security & Malware scan by CleanTalk <= 2.50 - Missing Authorization	20 Oct 202306:35	–	vulnrichment

[
  {
    "enisaIdVendor": [
      {
        "id": "5a66d567-c616-3295-866f-b5d4c1157c00",
        "vendor": {
          "name": "cleantalk"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "de5ad83c-da51-3a99-9769-955cad5eb621",
        "product": {
          "name": "Security & Malware scan by CleanTalk"
        },
        "product_version": "* ≤2.50"
      }
    ]
  }
]

Source	Link
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/0fb9b039-eb04-4c27-89eb-1932c9c31962
blog	www.blog.nintechnet.com/multiple-vulnerabilities-fixed-in-security-malware-scan-by-cleantalk-plugin/
wpscan	www.wpscan.com/vulnerability/23960f42-dfc1-4951-9169-02d889283f01
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

8.6High risk

Vulners AI Score8.6

CVSS 3.18.8

EPSS0.00261

SSVC