Lucene search

Spam protection, AntiSpam, FireWall by CleanTalk < 5.153.4 - Unauthenticated Blind SQL Injection

🗓️ 03 May 2021 00:00:00Reported by Ramuel GallType

Unauthenticated Blind SQL Injection in CleanTalk WordPress Plugin version < 5.153.

Reporter	Title	Published	Views	Family All 7
Cvelist	CVE-2021-24295 Time-based Blind SQL Injection in Spam protection, AntiSpam, FireWall by CleanTalk < 5.153.4	17 May 202116:48	–	cvelist
OpenVAS	WordPress CleanTalk Plugin < 5.153.4 SQLi Vulnerability	10 May 202100:00	–	openvas
Prion	Sql injection	17 May 202117:15	–	prion
CVE	CVE-2021-24295	17 May 202117:15	–	cve
ThreatPost	Anti-Spam WordPress Plugin Could Expose Website User Data	5 May 202120:58	–	threatpost
Patchstack	WordPress Spam protection, AntiSpam, FireWall by CleanTalk plugin <= 5.153.3 - Unauthenticated Time-Based Blind SQL Injection (SQLi) vulnerability	3 May 202100:00	–	patchstack
NVD	CVE-2021-24295	17 May 202117:15	–	nvd

Vulners

Node

cleantalk anti-spamRange<5.153.4wordpress

Source	Link
wordfence	www.wordfence.com/blog/2021/05/sql-injection-vulnerability-patched-in-cleantalk-antispam-plugin/
blog	www.blog.cleantalk.org/sql-injection-in-anti-spam-by-cleantalk-for-wordpress-prior-5-153-4/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

03 May 2021 00:00Current

2.1Low risk

Vulners AI Score2.1

EPSS0.004