Vulnerability Details CVE-2020-36698
The Security & Malware scan by CleanTalk plugin for WordPress is vulnerable to unauthorized user interaction in versions up to, and including, 2.50. This is due to missing capability checks on several AJAX actions and nonce disclosure in the source page of the administrative dashboard. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to call functions and delete and/or upload files.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 49.4%
CVSS Severity
CVSS v3 Score 8.8
Products affected by CVE-2020-36698
-
cpe:2.3:a:cleantalk:security_&_malware_scan:-
-
cpe:2.3:a:cleantalk:security_&_malware_scan:1.0
-
cpe:2.3:a:cleantalk:security_&_malware_scan:1.0.1
-
cpe:2.3:a:cleantalk:security_&_malware_scan:1.1
-
cpe:2.3:a:cleantalk:security_&_malware_scan:1.1.1
-
cpe:2.3:a:cleantalk:security_&_malware_scan:1.10
-
cpe:2.3:a:cleantalk:security_&_malware_scan:1.10.1
-
cpe:2.3:a:cleantalk:security_&_malware_scan:1.11
-
cpe:2.3:a:cleantalk:security_&_malware_scan:1.11.1
-
cpe:2.3:a:cleantalk:security_&_malware_scan:1.12
-
cpe:2.3:a:cleantalk:security_&_malware_scan:1.13
-
cpe:2.3:a:cleantalk:security_&_malware_scan:1.14
-
cpe:2.3:a:cleantalk:security_&_malware_scan:1.15
-
cpe:2.3:a:cleantalk:security_&_malware_scan:1.16
-
cpe:2.3:a:cleantalk:security_&_malware_scan:1.17
-
cpe:2.3:a:cleantalk:security_&_malware_scan:1.18
-
cpe:2.3:a:cleantalk:security_&_malware_scan:1.19
-
cpe:2.3:a:cleantalk:security_&_malware_scan:1.2
-
cpe:2.3:a:cleantalk:security_&_malware_scan:1.2.1
-
cpe:2.3:a:cleantalk:security_&_malware_scan:1.2.3
-
cpe:2.3:a:cleantalk:security_&_malware_scan:1.20
-
cpe:2.3:a:cleantalk:security_&_malware_scan:1.20.1
-
cpe:2.3:a:cleantalk:security_&_malware_scan:1.20.2
-
cpe:2.3:a:cleantalk:security_&_malware_scan:1.21
-
cpe:2.3:a:cleantalk:security_&_malware_scan:1.21.1
-
cpe:2.3:a:cleantalk:security_&_malware_scan:1.22
-
cpe:2.3:a:cleantalk:security_&_malware_scan:1.23
-
cpe:2.3:a:cleantalk:security_&_malware_scan:1.24
-
cpe:2.3:a:cleantalk:security_&_malware_scan:1.25
-
cpe:2.3:a:cleantalk:security_&_malware_scan:1.26
-
cpe:2.3:a:cleantalk:security_&_malware_scan:1.27
-
cpe:2.3:a:cleantalk:security_&_malware_scan:1.28
-
cpe:2.3:a:cleantalk:security_&_malware_scan:1.29
-
cpe:2.3:a:cleantalk:security_&_malware_scan:1.29.1
-
cpe:2.3:a:cleantalk:security_&_malware_scan:1.3
-
cpe:2.3:a:cleantalk:security_&_malware_scan:1.3.1
-
cpe:2.3:a:cleantalk:security_&_malware_scan:1.4.2
-
cpe:2.3:a:cleantalk:security_&_malware_scan:1.4.3
-
cpe:2.3:a:cleantalk:security_&_malware_scan:1.5
-
cpe:2.3:a:cleantalk:security_&_malware_scan:1.5.1
-
cpe:2.3:a:cleantalk:security_&_malware_scan:1.5.2
-
cpe:2.3:a:cleantalk:security_&_malware_scan:1.6
-
cpe:2.3:a:cleantalk:security_&_malware_scan:1.6.1
-
cpe:2.3:a:cleantalk:security_&_malware_scan:1.7
-
cpe:2.3:a:cleantalk:security_&_malware_scan:1.7.1
-
cpe:2.3:a:cleantalk:security_&_malware_scan:1.7.2
-
cpe:2.3:a:cleantalk:security_&_malware_scan:1.8
-
cpe:2.3:a:cleantalk:security_&_malware_scan:1.8.1
-
cpe:2.3:a:cleantalk:security_&_malware_scan:1.8.2
-
cpe:2.3:a:cleantalk:security_&_malware_scan:1.9
-
cpe:2.3:a:cleantalk:security_&_malware_scan:1.9.1
-
cpe:2.3:a:cleantalk:security_&_malware_scan:1.9.2
-
cpe:2.3:a:cleantalk:security_&_malware_scan:1.9.3
-
cpe:2.3:a:cleantalk:security_&_malware_scan:1.9.4
-
cpe:2.3:a:cleantalk:security_&_malware_scan:1.9.5
-
cpe:2.3:a:cleantalk:security_&_malware_scan:1.9.6
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.0
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.0.1
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.1
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.10
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.10.1
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.11
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.12
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.13
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.14
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.14.1
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.15
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.15.1
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.16
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.17
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.18
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.19
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.2
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.2.1
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.20
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.21
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.22
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.23
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.24
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.25
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.25.1
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.26
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.27
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.28
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.29
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.3
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.30
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.30.1
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.31
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.31.1
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.31.2
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.32
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.32.1
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.32.2
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.33
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.34
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.35
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.35.1
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.36
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.37
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.37.1
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.37.2
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.38
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.39
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.4
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.40
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.41
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.42
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.42.1
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.43
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.43.1
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.44
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.45
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.46
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.46.1
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.46.2
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.47
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.47.1
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.48
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.49
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.49.1
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.5
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.50
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.6
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.6.1
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.6.2
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.7
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.8
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.8.1
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.8.2
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.8.3
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.9