CVE-2023-5239

Summary

The Security & Malware scan by CleanTalk WordPress plugin before 2.121 retrieves client IP addresses from potentially untrusted headers, allowing an attacker to manipulate its value. This may be used to bypass bruteforce protection.

Affected Software

VendorProductVersion RangeStatus
UnknownSecurity & Malware scan by CleanTalk0 < 2.121affected

Weaknesses

  • CWE-290 Authentication Bypass by Spoofing

ADP Enrichment

CVE Program Container

Additional References

References