Anti Spam for Contact Forms, Comments & Online Stores – CleanTalk

Vulnerabilities 16Slug cleantalk-spam-protectLatest version 6.78WordPress.org →

Minimum safe version

6.72

Update to 6.72 or later to address 16 fixable vulnerabilities

Latest available6.78 ✓
Critical 9.8
2026-02-15< 6.72

Spam protection, Honeypot, Anti-Spam by CleanTalk <= 6.71 - Authorization Bypass via Reverse DNS (PTR record) Spoofing to Unauthenticated Arbitrary Plugin Installation

EUVDWordfenceCVE
Medium 4.3
2024-12-27< 6.21

WordPress Spam protection, AntiSpam, FireWall by CleanTalk Plugin <= 6.20 is vulnerable to Cross Site Request Forgery (CSRF)

PatchstackCVEWordfenceWPScan
Medium 4.3
2024-12-27< 6.21

WordPress Spam protection, AntiSpam, FireWall by CleanTalk Plugin <= 6.20 is vulnerable to Cross Site Request Forgery (CSRF)

PatchstackCVEWordfenceWPScan
N/A
2015-08-25< 5.22

Spam protection, AntiSpam, FireWall by CleanTalk < 5.22 - Reflected Cross-Site Scripting

Wordfence
N/A
< 5.22

Anti-Spam by CleanTalk &lt; 5.22 - Unauthenticated Reflected Cross-Site Scripting (XSS)

WPScan
N/A
2015-08-25< 5.22

WordPress Spam Protection Plugin <= 5.21 - Cross Site Scripting

Patchstack
N/A
2020-11-20< 5.149

WordPress Anti-Spam by CleanTalk plugin <= 5.148 - Multiple Authenticated SQL Injection (SQLi) vulnerabilities

Patchstack
Medium 6.1
2019-11-14< 5.127.4

WordPress Spam protection, AntiSpam, FireWall by CleanTalk plugin <=5.127.3 - Cross-Site Scripting (XSS) vulnerability

PatchstackCVEWordfenceWPScan