Security Resilience

CVE-2023-5239

Cleantalk Security \& Malware Scan ≤ 2.121

Public PoC
Published
27 November 2023
Modified
21 November 2024
CVSS Score v3.1 7.5
Click a component to see what it means
Raw vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
EPSS Score 0.0065 50th percentile
Risk Priority 58 floored blend · peak EPSS

CVSS and EPSS are reproduced from their sources (NVD, FIRST EPSS). Risk Priority is our own derived reading, not an NVD score.

Summary

CVE-2023-5239 is a high-severity an unspecified weakness vulnerability in Cleantalk Security \& Malware Scan. Its CVSS base score is 7.5 (High).

Operationally, ranked in the top 50% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.

EU & UK References

Vulnerability Data

The Security & Malware scan by CleanTalk WordPress plugin before 2.121 retrieves client IP addresses from potentially untrusted headers, allowing an attacker to manipulate its value. This may be used to bypass bruteforce protection.

CWE(s)
NVD-CWE-noinfo

Related Threats

CVEs Like This One

CVE-2024-13365Same product: Cleantalk Security \& Malware Scan
CVE-2024-10542Same vendor: Cleantalk
CVE-2026-10770Same vendor: Cleantalk
CVE-2023-51696Same vendor: Cleantalk
CVE-2023-51535Same vendor: Cleantalk
CVE-2024-10781Same vendor: Cleantalk
CVE-2026-3213Same vendor: Cleantalk

Affected Assets

cleantalk
security \& malware scan
≤ 2.121

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References