CCleanTalk

Products

Exploited and recent CVEs

• CVE-2026-109198 High 7.2 Anti-Spam by CleanTalk <= 6.89.1 - Unauthenticated Stored Cross-Site Scripting via 'user_email' Registration Parameter 0.4%
• CVE-2026-103424 Medium 5.4 Anti-Spam by CleanTalk <= 6.88 - Unauthenticated Stored Cross-Site Scripting via Comment Content via ContactsEncoder Greedy Regex 0.2%
• CVE-2026-77830 High 7.2 Spam protection, Honeypot, Anti-Spam by CleanTalk <= 6.86 - Unauthenticated Stored Cross-Site Scripting via Comment Content aria-label Placeholder 0.5%
• CVE-2026-1490 Critical 9.8 Spam protection, Honeypot, Anti-Spam by CleanTalk <= 6.71 - Authorization Bypass via Reverse DNS (PTR record) Spoofing to Unauthenticated Arbitrary Plugin Installation 1.3%
• CVE-2025-13604 High 7.2 Login Security, FireWall, Malware removal by CleanTalk <= 2.168 - Unauthenticated Stored Cross-Site Scripting via Page URL 0.3%
• CVE-2024-13365 Critical 9.8 Security & Malware scan by CleanTalk <= 2.149 - Unauthenticated Arbitrary File Upload 1.6%
• CVE-2024-10542 Critical 9.8 Spam protection, Anti-Spam, FireWall by CleanTalk <= 6.43.2 - Authorization Bypass via Reverse DNS Spoofing to Unauthenticated Arbitrary Plugin Installation 15.4%
• CVE-2024-10781 High 8.1 Spam protection, Anti-Spam, FireWall by CleanTalk <= 6.44 - Authorization Bypass due to Missing Empty Value Check to Unauthenticated Arbitrary Plugin Installation 3.7%
• CVE-2024-10570 High 7.5 Security & Malware scan by CleanTalk <= 2.145 - Authorization Bypass via Reverse DNS Spoofing to Unauthenticated SQL Injection 0.6%
• CVE-2020-36698 High 8.8 Security & Malware scan by CleanTalk <= 2.50 - Missing Authorization 1.2%
• CVE-2022-28222 Medium 6.1 CleanTalk AntiSpam <= 5.173 Reflected XSS 2.9%
• CVE-2022-28221 Medium 6.1 CleanTalk AntiSpam <= 5.173 Reflected XSS 2.4%