CVE-2021-24131: Cleantalk Anti-Spam

High severity, CVSS 7.2. EPSS: 1.4% chance of exploitation in the next 30 days.

Unvalidated input in the Anti-Spam by CleanTalk WordPress plugin, versions before 5.149, lead to multiple authenticated SQL injection vulnerabilities, however, it requires high privilege user (admin+).

Affected products

• Cleantalk Anti-Spam: before 5.149 (fixed in 5.149)

Published 2021-03-18. Last modified 2026-06-17.