CVE Catalog
CVE-2026-66593
CriticalCVSS 9.3Summary
Unauthenticated SQL Injection vulnerability in Security & Malware scan by CleanTalk versions up to 2.184. An attacker can manipulate database queries.
Risk Assessment
Risk of unauthorized access to data, modification or deletion, and potential administrator account takeover.
Recommendation
Update the Security & Malware scan by CleanTalk plugin to the latest version that includes the security fix.
Original NVD description (English source)
Unauthenticated SQL Injection in Security & Malware scan by CleanTalk <= 2.184 versions.