Lucene search
+L

14 matches found

NVD
NVD
•added 2026/10/06 9:17 a.m.•6 views

CVE-2026-39768

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. False positive...

0.00191EPSS
SaveExploits0
CVE
CVE
•added 2026/10/06 8:34 a.m.•6 views

CVE-2026-39768

The Security & Malware scan by CleanTalk WordPress plugin (versions

0.00191EPSS
SaveExploits0
Vulnrichment
Vulnrichment
•added 2026/10/06 8:34 a.m.•2 views

CVE-2026-39768 WordPress Security & Malware scan by CleanTalk plugin <= 2.189 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Security & Malware scan by CleanTalk = 2.189 versions...

7.1CVSS5.8AI score0.00191EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/06 8:34 a.m.•31 views

CVE-2026-39768

...

0.00191EPSS
SaveExploits0
EUVD
EUVD
•added 2026/10/06 8:34 a.m.•5 views

EUVD-2026-93275

Unauthenticated Cross Site Scripting XSS in Security & Malware scan by CleanTalk = 2.189 versions...

7.1CVSS5.8AI score0.00191EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/10/06 12:00 a.m.•7 views

PT-2026-106440

Unauthenticated Cross Site Scripting XSS in Security & Malware scan by CleanTalk = 2.189 versions...

7.1CVSS5.8AI score0.00191EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2026/10/05 4:32 p.m.•3 views

WordPress Security & Malware scan by CleanTalk plugin <= 2.189 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Security & Malware scan by CleanTalk versions = 2.189...

7.1CVSS5.8AI score0.00191EPSS
SaveExploits0Affected Software1
NVD
NVD
•added 2026/08/20 12:16 p.m.•16 views

CVE-2026-66593

Unauthenticated SQL Injection in Security & Malware scan by CleanTalk = 2.184 versions...

9.3CVSS0.004EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/08/20 12:07 p.m.•15 views

EUVD-2026-63336

Unauthenticated SQL Injection in Security & Malware scan by CleanTalk = 2.184 versions...

9.3CVSS5.8AI score0.004EPSS
SaveExploits0References1
CVE
CVE
•added 2026/08/20 12:07 p.m.•66 views

CVE-2026-66593

CVE-2026-66593 is an unauthenticated SQL injection vulnerability in the WordPress plugin Security & Malware scan by CleanTalk , affecting versions ≤ 2.184 . The flaw allows a remote attacker to execute arbitrary SQL queries without authentication, leading to high confidentiality impact and low av...

9.3CVSS5.8AI score0.004EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/02/12 12:00 a.m.•16 views

WordPress plugin Security & Malware scan by CleanTalk 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A code issue vulnerability exists in WordPress plugin...

9.8CVSS8.9AI score0.01584EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2025/02/11 10:33 p.m.•14 views

WordPress Security & Malware scan by CleanTalk plugin <= 2.149 - Unauthenticated Arbitrary File Upload vulnerability

Unauthenticated Arbitrary File Upload vulnerability discovered by Lucio Sá in WordPress Plugin Security & Malware scan by CleanTalk versions = 2.149...

9.8CVSS7AI score0.01584EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/11/27 4:22 p.m.•46 views

CVE-2023-5239 Security & Malware scan by CleanTalk < 2.121 - IP Spoofing

The Security & Malware scan by CleanTalk WordPress plugin before 2.121 retrieves client IP addresses from potentially untrusted headers, allowing an attacker to manipulate its value. This may be used to bypass bruteforce protection...

7.7AI score0.00653EPSS
SaveExploits2References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/20 12:00 a.m.•2 views

CVE-2020-36698: Missing Authorization

The Security & Malware scan by CleanTalk plugin for WordPress is vulnerable to unauthorized user interaction in versions up to, and including, 2.50. This is due to missing capability checks on several AJAX actions and nonce disclosure in the source page of the administrative dashboard. This makes...

8.8CVSS7.7AI score0.00964EPSS
SaveExploits1References3
Rows per page
Query Builder