PT-2024-8882 · Cleantalk · Cleantalk

Michael Mazzolini + 1 · Published 2024-10-23 · Updated 2025-07-12 · CVE-2024-10542

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: CleanTalk versions up to and including 6.43.2

Description: The Spam protection, Anti-Spam, FireWall by CleanTalk plugin for WordPress is susceptible to unauthorized Arbitrary Plugin Installation due to an authorization bypass. This bypass is achieved through reverse DNS spoofing within the checkWithoutToken() function. Successful exploitation allows unauthenticated attackers to install and activate arbitrary plugins, potentially leading to remote code execution if another vulnerable plugin is already installed and active.

Recommendations: Update CleanTalk to version 6.43.3.

Fix

RCE

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

BDU:2024-10549

CVE-2024-10542

Affected Products

Cleantalk

References · 37

• https://bdu.fstec.ru/vul/2024-10549 · Security Note
• https://plugins.trac.wordpress.org/changeset/3179819/cleantalk-spam-protect#file631 · Patch
• https://osv.dev/vulnerability/CVE-2024-10542 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-10542 · Security Note
• https://t.me/latest_high_impact_cve/1567 · Telegram Post
• https://twitter.com/Dinosn/status/1861261693147361736 · Twitter Post
• https://twitter.com/zoomeye_team/status/1861357359312052270 · Twitter Post
• https://twitter.com/vietthanhsports/status/1862016064466690423 · Twitter Post
• https://twitter.com/the_yellow_fall/status/1861234869050998810 · Twitter Post
• https://t.me/true_secator/6476 · Telegram Post
• https://twitter.com/CriminalIP_US/status/1867464476817338560 · Twitter Post
• https://twitter.com/vietthanhsports/status/1862016058233954642 · Twitter Post
• https://wordfence.com/threat-intel/vulnerabilities/id/d7eb5fad-bb62-4f0b-ad52-b16c3e442b62?source=cve · Note
• https://t.me/pentestingnews/53611 · Telegram Post
• https://plugins.trac.wordpress.org/browser/cleantalk-spam-protect/tags/6.43.2/lib/Cleantalk/ApbctWP/RemoteCalls.php#L41 · Note