What’s Vulnerable › Vulnerabilities

CVE-2023-5239: Security & Malware scan by CleanTalk < 2.121 - IP Spoofing

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2023-11-27 · updated 2026-06-17

Description

The Security & Malware scan by CleanTalk WordPress plugin before 2.121 retrieves client IP addresses from potentially untrusted headers, allowing an attacker to manipulate its value. This may be used to bypass bruteforce protection.

Affected products

• cleantalk Login Security, FireWall, Malware removal by CleanTalk: through 2.121

References

• https://wpscan.com/vulnerability/1d748f91-773b-49d6-8f68-a27d397713c3
• https://wpscan.com/vulnerability/1d748f91-773b-49d6-8f68-a27d397713c3

Get alerted when CVE-2023-5239 or the next vulnerability affects your stack