WordPress plugin
Security Plugin, Firewall & Malware Scanner with Auto Removal security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 8 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical1
- High5
- Medium1
- Low1
All Security Plugin, Firewall & Malware Scanner with Auto Removal vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| High8.1 | Unauthenticated Authentication Bypass ≤2.190Update to 2.191 | CVE-2026-114443 | |
| Low2.7 | Authenticated (Administrator+) Information Exposure ≤2.190Update to 2.191 | CVE-2026-114444 | |
| High7.5 | Unauthenticated SQL Injection ≤2.184Update to 2.185 | CVE-2026-66593 | |
| High7.2 | Unauthenticated Stored Cross-Site Scripting via Page URL ≤2.168Update to 2.169 | CVE-2025-13604 | |
| Critical9.8 | Unauthenticated Arbitrary File Upload ≤2.149Update to 2.150 | CVE-2024-13365 | |
| High7.5 | Authorization Bypass via Reverse DNS Spoofing to Unauthenticated SQL Injection ≤2.145Update to 2.145.1 | CVE-2024-10570 | |
| Medium5.3 | IP Spoofing to Protection Mechanism Bypass ≤2.120Update to 2.121 | CVE-2023-5239 | |
| High8.8 | Missing Authorization ≤2.50Update to 2.51 | CVE-2020-36698 |
- High8.1Unauthenticated Authentication Bypass
≤2.190Update to 2.191
- Low2.7Authenticated (Administrator+) Information Exposure
≤2.190Update to 2.191
- High7.5Unauthenticated SQL Injection
≤2.184Update to 2.185
- High7.2Unauthenticated Stored Cross-Site Scripting via Page URL
≤2.168Update to 2.169
- Critical9.8Unauthenticated Arbitrary File Upload
≤2.149Update to 2.150
- High7.5Authorization Bypass via Reverse DNS Spoofing to Unauthenticated SQL Injection
≤2.145Update to 2.145.1
- Medium5.3IP Spoofing to Protection Mechanism Bypass
≤2.120Update to 2.121
- High8.8Missing Authorization
≤2.50Update to 2.51
Security Plugin, Firewall & Malware Scanner with Auto Removal: common questions
Does Security Plugin, Firewall & Malware Scanner with Auto Removal have known vulnerabilities?
Yes. VulnCrest Radar lists 8 known vulnerabilities in Security Plugin, Firewall & Malware Scanner with Auto Removal: 1 critical, 5 high, 1 medium, 1 low. None are known to affect version null.
How do I check which version of Security Plugin, Firewall & Malware Scanner with Auto Removal I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Security Plugin, Firewall & Malware Scanner with Auto Removal vulnerability?
CVE-2026-114443, published Oct 28, 2026: Security by CleanTalk <= 2.190 - Unauthenticated Authentication Bypass. Severity: High (CVSS 8.1).
Is any Security Plugin, Firewall & Malware Scanner with Auto Removal vulnerability listed in CISA KEV?
No. None of the known Security Plugin, Firewall & Malware Scanner with Auto Removal vulnerabilities is currently listed in the CISA KEV catalog.