WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
clean-login
Published
2026-06-16
Title
Clean Login < 1.16 - Unauthenticated Insecure Direct Object Reference
Slug
clean-social-icons
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
cleantalk-spam-protect
Published
2015-08-25
Title
Anti-Spam by CleanTalk < 5.22 - Unauthenticated Reflected Cross-Site Scripting (XSS)
Slug
cleantalk-spam-protect
Published
2019-11-12
Title
Anti-Spam by CleanTalk < 5.127.4 - Cross-Site Scripting Issue
Slug
cleantalk-spam-protect
Published
2020-11-20
Title
Anti-Spam by CleanTalk < 5.149 - Multiple Authenticated SQL Injections
Slug
cleantalk-spam-protect
Published
2021-05-03
Title
Spam protection, AntiSpam, FireWall by CleanTalk < 5.153.4 - Unauthenticated Blind SQL Injection
Slug
cleantalk-spam-protect
Published
2022-03-30
Title
Spam protection, AntiSpam, FireWall by CleanTalk < 5.174.1 - Reflected Cross-Site Scripting
Slug
cleantalk-spam-protect
Published
2022-10-03
Title
Anti-Spam by CleanTalk < 5.185.1 - Admin+ SQLi
Slug
cleantalk-spam-protect
Published
2023-12-27
Title
Spam protection, AntiSpam, FireWall by CleanTalk < 6.21 - Counters Reset/Creation via CSRF
Slug
cleantalk-spam-protect
Published
2023-12-27
Title
Spam protection, AntiSpam, FireWall by CleanTalk < 6.21 - Email Update via CSRF
Slug
cleantalk-spam-protect
Published
2024-11-25
Title
Spam protection, Anti-Spam, FireWall by CleanTalk < 6.44 - Unauthenticated Arbitrary Plugin Installation
Slug
cleantalk-spam-protect
Published
2024-11-25
Title
Spam protection, Anti-Spam, FireWall by CleanTalk < 6.45 - Unauthenticated Arbitrary Plugin Installation
Slug
cleantalk-spam-protect
Published
2026-02-14
Title
Spam protection, Honeypot, Anti-Spam by CleanTalk < 6.72 - Unauthenticated Arbitrary Plugin Installation
Slug
cleantalk-spam-protect
Published
2026-05-20
Title
Spam protection, Honeypot, Anti-Spam by CleanTalk < 6.79 - Unauthenticated Stored XSS via Comment Shortcode Bypass
Slug
cleantalk-spam-protect
Published
2026-07-27
Title
Spam protection, AntiSpam, FireWall by CleanTalk < 6.83 - Unauthenticated Stored Cross-Site Scripting
Slug
cleantalk-spam-protect
Published
2026-09-04
Title
Spam protection, Honeypot, Anti-Spam by CleanTalk < 6.87 - Unauthenticated Stored XSS via Comment Content aria-label Placeholder
Slug
cleanup-action-scheduler
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
cleanup-light
Published
2024-11-27
Title
Cleanup – Directory Listing & Classifieds WordPress Plugin < 1.0.5 - Reflected Cross-Site Scripting
Slug
clear-sucuri-cache
Published
2025-03-28
Title
Clear Sucuri Cache <= 1.4 - Missing Authorization
Slug
clearbit
Published
2025-04-01
Title
Clearbit Reveal <= 1.0.6 - Cross-Site Request Forgery
Slug
clearblue-ovulation-calculator
Published
2025-07-24
Title
Clearblue® Ovulation Calculator <= 1.2.4 - Unauthenticated Local File Inclusion
Slug
clearfy
Published
2022-06-14
Title
Clearfy Cache < 2.0.5 - Reflected Cross-Site Scripting
Slug
clearfy
Published
2024-05-13
Title
Clearfy Cache < 2.3.3 - Cross-Site Request Forgery
Slug
clearfy
Published
2024-08-12
Title
Clearfy Cache < 2.2.5 - Missing Authorization
Slug
clearfy
Published
2025-04-11
Title
Webcraftic Clearfy – WordPress optimization plugin < 2.3.3 - Cross-Site Request Forgery to Plugin Settings Update via 'setup-wbcr_clearfy'