CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
What the vulnerability does
Missing Authorization vulnerability in СleanTalk - Anti-Spam Protection Spam protection, AntiSpam, FireWall by CleanTalk allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Spam protection, AntiSpam, FireWall by CleanTalk: from n/a through 6.10.
Explanation of Vulnerability in Simple Terms
The CleanTalk anti-spam plugin for WordPress and other CMS platforms contains an authorization flaw that allows authenticated users with low privileges to perform actions they should not be able to access. An attacker with a basic user account can read sensitive data, modify site content, or disrupt service. The vulnerability affects versions up to 6.10.
What an attacker can do
Read sensitive data, modify content, or disrupt service with a low-privilege user account.
Potential impact on your site
Any registered user can escalate their access to perform admin-level actions without additional authentication.
Conditions required to exploit
Attacker must have a valid low-privilege user account on the site; no user interaction required.
Key dates
External resources
Related vulnerabilities
