282 matches found
WordPress Spam protection, Honeypot, Anti-Spam by CleanTalk plugin <= 6.86 - Unauthenticated Stored Cross-Site Scripting via Comment Content aria-label Placeholder vulnerability
Unauthenticated Stored Cross-Site Scripting via Comment Content aria-label Placeholder vulnerability discovered by theviper17y in WordPress Plugin Spam protection, AntiSpam, FireWall by CleanTalk versions = 6.86...
CVE-2026-66593
Unauthenticated SQL Injection in Security & Malware scan by CleanTalk = 2.184 versions...
CVE-2026-66593
CVE-2026-66593 is an unauthenticated SQL injection vulnerability in the WordPress plugin Security & Malware scan by CleanTalk , affecting versions ≤ 2.184 . The flaw allows a remote attacker to execute arbitrary SQL queries without authentication, leading to high confidentiality impact and low av...
CVE-2026-66593 WordPress Security & Malware scan by CleanTalk plugin <= 2.184 - SQL Injection vulnerability
Unauthenticated SQL Injection in Security & Malware scan by CleanTalk = 2.184 versions...
CVE-2026-66593 WordPress Security & Malware scan by CleanTalk plugin <= 2.184 - SQL Injection vulnerability
Unauthenticated SQL Injection in Security & Malware scan by CleanTalk = 2.184 versions...
PT-2026-78957
Unauthenticated SQL Injection in Security & Malware scan by CleanTalk = 2.184 versions...
CVE-2026-66593: Improper Neutralization of Special Elements used in an SQL Command
Unauthenticated SQL Injection in Security & Malware scan by CleanTalk = 2.184 versions...
WordPress Security & Malware scan by CleanTalk plugin <= 2.184 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Noman Riffat in WordPress Plugin Security & Malware scan by CleanTalk versions = 2.184...
CVE-2026-65437
Unauthenticated Cross Site Scripting XSS in Spam protection, AntiSpam, FireWall by CleanTalk = 6.82 versions...
CVE-2026-65437 WordPress Spam protection, AntiSpam, FireWall by CleanTalk plugin <= 6.82 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Spam protection, AntiSpam, FireWall by CleanTalk = 6.82 versions...
CVE-2026-65437 WordPress Spam protection, AntiSpam, FireWall by CleanTalk plugin <= 6.82 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Spam protection, AntiSpam, FireWall by CleanTalk = 6.82 versions...
CVE-2026-65437
Unauthenticated Cross Site Scripting XSS in Spam protection, AntiSpam, FireWall by CleanTalk = 6.82 versions...
CVE-2026-65437
CVE-2026-65437 describes an unauthenticated XSS in the WordPress plugin Spam protection, AntiSpam, FireWall by CleanTalk, affected through versions <= 6.82. The issue impacts users via cross-site scripting without authentication; CVSS 3.1 base score 7.1 (HIGH) with network attack vector, low i...
WordPress Spam protection, AntiSpam, FireWall by CleanTalk plugin <= 6.82 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by daroo in WordPress Plugin Spam protection, AntiSpam, FireWall by CleanTalk versions = 6.82...
CVE-2026-65437: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Spam protection, AntiSpam, FireWall by CleanTalk = 6.82 versions...
PT-2026-65316
Name of the Vulnerable Software and Affected Versions Spam protection, AntiSpam, FireWall by CleanTalk versions prior to 6.83 Description Unauthenticated Cross Site Scripting XSS allows an attacker to execute malicious scripts in the browser of a user without requiring authentication...
CVE-2026-10770 Anti-Spam by CleanTalk - Moderately critical - Cross site scripting - SA-CONTRIB-2026-042
Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Anti-Spam by CleanTalk allows Reflected XSS. This issue affects Anti-Spam by CleanTalk versions: from 0.0.0 to 9.7.1...
CVE-2026-10770 Anti-Spam by CleanTalk - Moderately critical - Cross site scripting - SA-CONTRIB-2026-042
Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Anti-Spam by CleanTalk allows Reflected XSS. This issue affects Anti-Spam by CleanTalk versions: from 0.0.0 to 9.7.1...
CVE-2026-10770
The Anti-Spam by CleanTalk module for Drupal versions 0.0.0 through 9.7.1 is vulnerable to Reflected Cross-site Scripting (XSS) . The root cause is the failure to sufficiently sanitize API response messages before rendering them in HTML output, specifically within the _cleantalk_die() and ct_die(...
CVE-2026-10770 Anti-Spam by CleanTalk - Moderately critical - Cross site scripting - SA-CONTRIB-2026-042
Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Anti-Spam by CleanTalk allows Reflected XSS. This issue affects Anti-Spam by CleanTalk versions: from 0.0.0 to 9.7.1...