CVE-2026-8071Disclosure

LOWCVSS 8.8 · HIGH

Signal is active with 3 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

The Anti-Spam by CleanTalk. Spam protection WordPress plugin before 6.79 does not properly sanitize content within a custom shortcode used in its email-encoding feature, allowing unauthenticated attackers to inject arbitrary web scripts into approved comments that will execute when any user (including administrators) views the post.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

https://wpscan.com/vulnerability/0d4635b5-2d79-4337-a1ad-6b8d02cfd64b/

Weakness type (CWE)

CWE-79

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

3 mentions across 1 observed day

What's happening

Technical details provided in 3 signals
Disclosure: 3 classified signals
3 total mentions across 1 day

Deep dive

Activity timeline3 mentions / 1d

Signal classification1 categories

Disclosure

3100.0%

Referenced assets3 URLs

By indicator

Full discourse3 posts

Infoflowcloud@infoflowcloud136d
Disclosure
🚨*CVE* CVE-2026-8071 The Anti-Spam by CleanTalk. Spam protection WordPress plugin before 6.79 does not properly sanitize content within a custom shortcode used in its email-encoding feature… https://www.cve.org/CVERecord?id=CVE-2026-8071 ----- Traducción: CVE-2026-8071 El … http://infoflow.cloud`
Post summary
CVE‑2026‑8071 is a sanitization flaw in CleanTalk's Anti‑Spam WordPress plugin affecting versions prior to 6.79, as disclosed via a CVE record link.
0000026
79 followersView on X
CVE@CVEnew136d
Disclosure
CVE-2026-8071 The Anti-Spam by CleanTalk. Spam protection WordPress plugin before 6.79 does not properly sanitize content within a custom shortcode used in its email-encoding feature… https://www.cve.org/CVERecord?id=CVE-2026-8071
Post summary
This post cites CVE‑2026‑8071, describing an improper sanitization flaw in the CleanTalk Antispam WordPress plugin’s email‑encoding shortcode, but no exploit or patch information is provided.
00000151
57.6K followersView on X
Vulmon Vulnerability Feed@VulmonFeeds136d
Disclosure
CVE-2026-8071 Stored Cross-Site Scripting in CleanTalk Anti-Spam WordPress Plugin Before 6.79 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-8071
Post summary
This entry reports the discovery of CVE‑2026‑8071, a stored XSS vulnerability in CleanTalk Anti‑Spam WordPress Plugin versions before 6.79. No exploit, patch, or active exploitation details are provided.
0000049
4.0K followersView on X

Explore more

Back to dashboard