anti-spam_by_cleantalk_spam_protection_without_captcha vulnerabilities

CVEs whose affected-version data names the anti-spam_by_cleantalk_spam_protection_without_captcha package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-103424Medium· 5.4

3w ago

The Anti-Spam by CleanTalk – Spam Protection Without CAPTCHA plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' parameter in all versions up to, and including, 6.88 due to insufficient input sanitization …

The Anti-Spam by CleanTalk – Spam Protection Without CAPTCHA plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' parameter in all versions up to, and including, 6.88 due to insufficient input sanitization …

▾ Sunlitcleantalk · Anti-Spam by CleanTalk – Spam Protection Without CAPTCHAEPSS 0.22%via NVD