CVE-2022-3302

Name of the Vulnerable Software and Affected Versions Spam protection, AntiSpam, FireWall by CleanTalk WordPress plugin versions prior to 5.185.1

Description The issue concerns a lack of validation for ids used in SQL statements, potentially leading to SQL injection. This could be exploited by high-privilege users, such as admins.

Recommendations For versions prior to 5.185.1, update to version 5.185.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the plugin's SQL functionality to minimize the risk of exploitation.