Cleantalk · Anti-Spam · CVE-2026-8071
**Name of the Vulnerable Software and Affected Versions**
Anti-Spam by CleanTalk. Spam protection WordPress plugin versions prior to 6.79
**Description**
Insufficient sanitization of content within a custom shortcode used in the email-encoding feature allows unauthenticated attackers to perform Stored Cross-Site Scripting (XSS). This enables the injection of arbitrary web scripts into approved comments, which are then executed when any user, including administrators, views the post.
**Recommendations**
Update to version 6.79 or later.