https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T06:25:42.174329+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-10548 bdu:2024-10548 2026-10-05T06:25:42.177002+00:00 bdu:2024-10548 https://cve.radiocsirt.org/vuln/euvd-2026-285474 EUVD-2026-285474 2026-10-05T06:25:42.177034+00:00 EUVD-2026-285474 https://cve.radiocsirt.org/vuln/fkie_cve-2024-10781 fkie_cve-2024-10781 2026-10-05T06:25:42.177049+00:00

The Spam protection, Anti-Spam, FireWall by CleanTalk plugin for WordPress is vulnerable to unauthorized Arbitrary Plugin Installation due to an missing empty value check on the 'api_key' value in the 'perform' function in all versions up to, and including, 6.44. This makes it possible for unauthenticated attackers to install and activate arbitrary plugins which can be leveraged to achieve remote code execution if another vulnerable plugin is installed and activated.

 https://cve.radiocsirt.org/vuln/ghsa-m52x-q4c4-72qw GHSA-m52x-q4c4-72qw 2026-10-05T06:25:42.177077+00:00

The Spam protection, Anti-Spam, FireWall by CleanTalk plugin for WordPress is vulnerable to unauthorized Arbitrary Plugin Installation due to an missing empty value check on the 'api_key' value in the 'perform' function in all versions up to, and including, 6.44. This makes it possible for unauthenticated attackers to install and activate arbitrary plugins which can be leveraged to achieve remote code execution if another vulnerable plugin is installed and activated.