Vulnerability Details CVE-2024-13365
The Security & Malware scan by CleanTalk plugin for WordPress is vulnerable to arbitrary file uploads due to the plugin uploading and extracting .zip archives when scanning them for malware through the checkUploadedArchive() function in all versions up to, and including, 2.149. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.007
EPSS Ranking 70.8%
CVSS Severity
CVSS v3 Score 9.8
Products affected by CVE-2024-13365
-
cpe:2.3:a:cleantalk:security_&_malware_scan:-
-
cpe:2.3:a:cleantalk:security_&_malware_scan:1.0
-
cpe:2.3:a:cleantalk:security_&_malware_scan:1.0.1
-
cpe:2.3:a:cleantalk:security_&_malware_scan:1.1
-
cpe:2.3:a:cleantalk:security_&_malware_scan:1.1.1
-
cpe:2.3:a:cleantalk:security_&_malware_scan:1.10
-
cpe:2.3:a:cleantalk:security_&_malware_scan:1.10.1
-
cpe:2.3:a:cleantalk:security_&_malware_scan:1.11
-
cpe:2.3:a:cleantalk:security_&_malware_scan:1.11.1
-
cpe:2.3:a:cleantalk:security_&_malware_scan:1.12
-
cpe:2.3:a:cleantalk:security_&_malware_scan:1.13
-
cpe:2.3:a:cleantalk:security_&_malware_scan:1.14
-
cpe:2.3:a:cleantalk:security_&_malware_scan:1.15
-
cpe:2.3:a:cleantalk:security_&_malware_scan:1.16
-
cpe:2.3:a:cleantalk:security_&_malware_scan:1.17
-
cpe:2.3:a:cleantalk:security_&_malware_scan:1.18
-
cpe:2.3:a:cleantalk:security_&_malware_scan:1.19
-
cpe:2.3:a:cleantalk:security_&_malware_scan:1.2
-
cpe:2.3:a:cleantalk:security_&_malware_scan:1.2.1
-
cpe:2.3:a:cleantalk:security_&_malware_scan:1.2.3
-
cpe:2.3:a:cleantalk:security_&_malware_scan:1.20
-
cpe:2.3:a:cleantalk:security_&_malware_scan:1.20.1
-
cpe:2.3:a:cleantalk:security_&_malware_scan:1.20.2
-
cpe:2.3:a:cleantalk:security_&_malware_scan:1.21
-
cpe:2.3:a:cleantalk:security_&_malware_scan:1.21.1
-
cpe:2.3:a:cleantalk:security_&_malware_scan:1.22
-
cpe:2.3:a:cleantalk:security_&_malware_scan:1.23
-
cpe:2.3:a:cleantalk:security_&_malware_scan:1.24
-
cpe:2.3:a:cleantalk:security_&_malware_scan:1.25
-
cpe:2.3:a:cleantalk:security_&_malware_scan:1.26
-
cpe:2.3:a:cleantalk:security_&_malware_scan:1.27
-
cpe:2.3:a:cleantalk:security_&_malware_scan:1.28
-
cpe:2.3:a:cleantalk:security_&_malware_scan:1.29
-
cpe:2.3:a:cleantalk:security_&_malware_scan:1.29.1
-
cpe:2.3:a:cleantalk:security_&_malware_scan:1.3
-
cpe:2.3:a:cleantalk:security_&_malware_scan:1.3.1
-
cpe:2.3:a:cleantalk:security_&_malware_scan:1.4.2
-
cpe:2.3:a:cleantalk:security_&_malware_scan:1.4.3
-
cpe:2.3:a:cleantalk:security_&_malware_scan:1.5
-
cpe:2.3:a:cleantalk:security_&_malware_scan:1.5.1
-
cpe:2.3:a:cleantalk:security_&_malware_scan:1.5.2
-
cpe:2.3:a:cleantalk:security_&_malware_scan:1.6
-
cpe:2.3:a:cleantalk:security_&_malware_scan:1.6.1
-
cpe:2.3:a:cleantalk:security_&_malware_scan:1.7
-
cpe:2.3:a:cleantalk:security_&_malware_scan:1.7.1
-
cpe:2.3:a:cleantalk:security_&_malware_scan:1.7.2
-
cpe:2.3:a:cleantalk:security_&_malware_scan:1.8
-
cpe:2.3:a:cleantalk:security_&_malware_scan:1.8.1
-
cpe:2.3:a:cleantalk:security_&_malware_scan:1.8.2
-
cpe:2.3:a:cleantalk:security_&_malware_scan:1.9
-
cpe:2.3:a:cleantalk:security_&_malware_scan:1.9.1
-
cpe:2.3:a:cleantalk:security_&_malware_scan:1.9.2
-
cpe:2.3:a:cleantalk:security_&_malware_scan:1.9.3
-
cpe:2.3:a:cleantalk:security_&_malware_scan:1.9.4
-
cpe:2.3:a:cleantalk:security_&_malware_scan:1.9.5
-
cpe:2.3:a:cleantalk:security_&_malware_scan:1.9.6
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.0
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.0.1
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.1
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.10
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.10.1
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.100
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.101
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.102
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.103
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.104
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.105
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.106
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.106.1
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.107
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.108
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.108.1
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.109
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.109.1
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.11
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.110
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.111
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.112
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.113
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.114
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.115
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.116
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.117
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.118
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.119
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.12
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.120
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.121
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.122
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.123
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.124
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.125
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.126
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.126.1
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.127
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.128
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.128.1
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.129
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.13
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.130
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.130.1
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.131
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.132
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.133
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.134
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.134.1
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.134.2
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.134.3
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.135
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.136
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.136.1
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.137
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.138
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.138.1
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.139
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.14
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.14.1
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.140
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.141
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.142
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.143
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.144
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.145
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.145.1
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.146
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.147
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.148
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.148.1
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.149
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.15
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.15.1
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.16
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.17
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.18
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.19
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.2
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.2.1
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.20
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.21
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.22
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.23
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.24
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.25
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.25.1
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.26
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.27
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.28
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.29
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.3
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.30
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.30.1
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.31
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.31.1
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.31.2
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.32
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.32.1
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.32.2
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.33
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.34
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.35
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.35.1
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.36
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.37
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.37.1
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.37.2
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.38
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.39
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.4
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.40
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.41
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.42
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.42.1
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.43
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.43.1
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.44
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.45
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.46
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.46.1
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.46.2
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.47
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.47.1
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.48
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.49
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.49.1
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.5
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.50
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.51
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.52
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.53
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.54
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.55
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.56
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.57
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.57.1
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.57.2
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.57.3
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.58
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.58.1
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.59
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.59.1
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.6
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.6.1
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.6.2
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.60
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.61
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.62
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.63
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.64
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.65
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.66
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.66.1
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.66.2
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.66.3
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.67
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.67.1
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.67.2
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.68
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.69
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.7
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.70
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.71
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.72
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.72.1
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.72.2
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.73
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.74
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.75
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.76
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.76.1
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.76.2
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.77
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.78
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.78.1
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.79
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.8
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.8.1
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.8.2
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.8.3
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.80
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.80.1
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.81
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.81.1
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.81.2
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.82
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.83
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.84
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.85
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.87
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.87.1
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.88
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.89
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.9
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.90
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.91
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.91.1
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.92
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.93
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.94
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.95
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.96
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.97
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.98
-
cpe:2.3:a:cleantalk:security_&_malware_scan:2.99