Spam protection, AntiSpam, FireWall by CleanTalk < 6.21 - Counters Reset/Creation via CSRF

2024-01-0400:00:00

wpscan.com

spam protection

cleantalk

antispam

firewall

csrf

vulnerability

AI Score

7.1

Confidence

Low

EPSS

0.001

Percentile

24.1%

JSON

Description The plugin does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks, such as reset/create counters

References

patchstack.com/database/vulnerability/cleantalk-spam-protect/wordpress-spam-protection-anti-spam-firewall-by-cleantalk-plugin-6-20-cross-site-request-forgery-csrf-vulnerability