The CleanTalk cleantalk-spam-protect plugin before 5.127.4 for WordPress is affected by: Cross Site Scripting (XSS). The impact is: Allows an attacker to execute arbitrary HTML and JavaScript code via the from or till parameter. The component is: inc/cleantalk-users.php and inc/cleantalk-comments.php. The attack vector is: When the Administrator is logged in, a reflected XSS may execute upon a click on a malicious URL.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Cleantalk Spam Protect Plugin | — | Update cleantalk-spam-protect plugin to version 5.127.4, or a newer patched version | May 15, 2025 | Nov 12, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub