WordPress plugin
Anti-Spam, Spam FireWall by CleanTalk security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 20 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical2
- High9
- Medium9
- Low0
All Anti-Spam, Spam FireWall by CleanTalk vulnerabilities
- High7.2Unauthenticated Stored Cross-Site Scripting
≤6.90Update to 6.91
- High7.2Unauthenticated Stored Cross-Site Scripting via 'user_email' Registration Parameter
≤6.89.1Update to 6.90
- Medium5.4Unauthenticated Stored Cross-Site Scripting via Comment Content via ContactsEncoder Greedy Regex
≤6.88Update to 6.89
- Medium6.5Unauthenticated Arbitrary Shortcode Execution
<6.87Update to 6.87
- High7.2Unauthenticated Stored Cross-Site Scripting via Comment Content aria-label Placeholder
≤6.86Update to 6.87
- High7.2Unauthenticated Stored Cross-Site Scripting
≤6.82Update to 6.83
- High7.2Unauthenticated Stored Cross-Site Scripting
<6.79Update to 6.79
- Critical9.8Authorization Bypass via Reverse DNS (PTR record) Spoofing to Unauthenticated Arbitrary Plugin Installation
≤6.71Update to 6.72
- Critical9.8Authorization Bypass via Reverse DNS Spoofing to Unauthenticated Arbitrary Plugin Installation
≤6.43.2Update to 6.44
- High8.1Authorization Bypass due to Missing Empty Value Check to Unauthenticated Arbitrary Plugin Installation
≤6.44Update to 6.45
- Medium4.3Cross-Site Request Forgery
≤6.20Update to 6.21
- Medium4.3Cross-Site Request Forgery via apbct_settings__update_account_email
≤6.20Update to 6.21
- Medium6.3Missing Authorization
≤6.10Update to 6.11
- High7.2Authenticated (Administrator+) SQL Injection
≤5.185Update to 5.185.1
- Medium6.1Reflected Cross-Site Scripting
≤5.173Update to 5.174.1
- Medium6.1Reflected Cross-Site Scripting
≤5.173Update to 5.174.1
- High7.5Unauthenticated Blind SQL Injection
≤5.153.3Update to 5.153.4
- High7.2Authenticated SQL Injection
<5.149Update to 5.149
- Medium6.1Reflected Cross-Site Scripting
≤5.127.3Update to 5.127.4
- Medium6.1Reflected Cross-Site Scripting
<5.22Update to 5.22
Anti-Spam, Spam FireWall by CleanTalk: common questions
Does Anti-Spam, Spam FireWall by CleanTalk have known vulnerabilities?
Yes. VulnCrest Radar lists 20 known vulnerabilities in Anti-Spam, Spam FireWall by CleanTalk: 2 critical, 9 high, 9 medium. None are known to affect version null.
How do I check which version of Anti-Spam, Spam FireWall by CleanTalk I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Anti-Spam, Spam FireWall by CleanTalk vulnerability?
CVE-2026-115673, published Nov 4, 2026: Anti-Spam by CleanTalk <= 6.90 - Unauthenticated Stored Cross-Site Scripting. Severity: High (CVSS 7.2).
Is any Anti-Spam, Spam FireWall by CleanTalk vulnerability listed in CISA KEV?
No. None of the known Anti-Spam, Spam FireWall by CleanTalk vulnerabilities is currently listed in the CISA KEV catalog.