Login Security, FireWall, Malware removal by CleanTalk vulnerabilities
3 known vulnerabilities in Login Security, FireWall, Malware removal by CleanTalk from CleanTalk. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.2 High severity
Login Security, FireWall, Malware removal by…: Improper Neutralization of Input During Web Page Generation
The Login Security, FireWall, Malware removal by CleanTalk plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the page URL in all versions up to, and including, 2.168 due to insufficient input sanitization and output escaping. This makes it
- 9.8 Critical severity
Login Security, FireWall, Malware removal by…: Unrestricted Upload of File with Dangerous Type
The Security & Malware scan by CleanTalk plugin for WordPress is vulnerable to arbitrary file uploads due to the plugin uploading and extracting .zip archives when scanning them for malware through the checkUploadedArchive() function in all versions up to, and
- 7.5 High severity
Login Security, FireWall, Malware removal by…: Improper Neutralization of Special Elements used in an SQL Command
The Security & Malware scan by CleanTalk plugin for WordPress is vulnerable to unauthorized SQL Injection due to an authorization bypass via reverse DNS spoofing on the checkWithoutToken function in all versions up to, and including, 2.145, as well as insuffic