CVE-2022-3302

CVE-2022-3302: Anti-Spam by CleanTalk < 5.185.1 - Admin+ SQLi

Vendor Unknown
Product Spam protection, AntiSpam, FireWall by CleanTalk
Weakness CWE-89 · SQLi
Published October 25, 2022
Last update May 9, 2025

CVSS base score

What the vulnerability does

01Description

The Spam protection, AntiSpam, FireWall by CleanTalk WordPress plugin before 5.185.1 does not validate ids before using them in a SQL statement, which could lead to SQL injection exploitable by high privilege users such as admin

Key dates

02Disclosure timeline

October 25, 2022 CVE published
May 9, 2025 Record updated