Security Malware Scan By Cleantalk
Monthly
SQL injection in the Security & Malware Scan by CleanTalk WordPress plugin (versions 2.184 and earlier) lets remote attackers inject arbitrary SQL through unauthenticated requests, consistent with the CVSS PR:N metric. Reported by Patchstack with a CVSS 9.3, the flaw carries a scope change (S:C) and high confidentiality impact, so a successful attacker can read sensitive database contents such as WordPress user records and secret keys. No public exploit identified at time of analysis and it is not listed in CISA KEV, but the unauthenticated, low-complexity vector makes it a high-priority patching target.
SQL injection in the Security & Malware Scan by CleanTalk WordPress plugin (versions 2.184 and earlier) lets remote attackers inject arbitrary SQL through unauthenticated requests, consistent with the CVSS PR:N metric. Reported by Patchstack with a CVSS 9.3, the flaw carries a scope change (S:C) and high confidentiality impact, so a successful attacker can read sensitive database contents such as WordPress user records and secret keys. No public exploit identified at time of analysis and it is not listed in CISA KEV, but the unauthenticated, low-complexity vector makes it a high-priority patching target.