anti-spam_spam_firewall_by_cleantalk vulnerabilities

CVEs whose affected-version data names the anti-spam_spam_firewall_by_cleantalk package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-115673High· 7.5

yesterday

Anti-Spam by CleanTalk < 6.91 - Unauthenticated Stored XSS via Comment Author Email

The Anti-Spam, Spam FireWall by CleanTalk WordPress plugin before 6.91 does not escape a commenter-supplied value before outputting it on an administrative spam-review screen, allowing unauthenticated users to inject arbitrary web script…

▾ TwilightEPSS 0.27%via CVEORG