Now officially on WordPress.org

CVE Database / CVE-2021-24131

CVE · High

CVE-2021-24131 — Spam protection, Honeypot, Anti-Spam by CleanTalk [cleantalk-spam-protect] < 5.149

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2021-24131 Spam protection, Honeypot, Anti-Spam by CleanTalk [cleantalk-spam-protect] < 5.149 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') High 7.2 < 5.149 5.149 2020-11-20 —

CVE-2021-24131

The Anti-Spam by CleanTalk plugin for WordPress contained multiple SQL injection flaws in versions prior to 5.149. These vulnerabilities arose from insufficient validation of user-supplied data, allowing administrators and higher-privileged users to execute arbitrary SQL queries against the database. The issue was resolved in version 5.149 and later releases.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.

Run a free scan Get the plugin (free)

See the full security page for this plugin Browse the CVE database Browse all security findings