{
 "id": "WPSEC-2026-2021",
 "url": "https://wpsec.com/vuln/WPSEC-2026-2021/",
 "json_url": "https://wpsec.com/vuln/WPSEC-2026-2021/advisory.json",
 "markdown_url": "https://wpsec.com/vuln/WPSEC-2026-2021/index.md",
 "title": "Anti-Spam by CleanTalk <= 6.90 - Unauthenticated Open Redirect via SpamFireWall Block Page",
 "description": "The Anti-Spam, Spam FireWall by CleanTalk plugin for WordPress is vulnerable to Open Redirect via the request URI shown on the SpamFireWall block page in all versions up to, and including, 6.90, due to the {REQUEST_URI} link target being escaped only with esc_url(), which keeps protocol-relative values such as '//example.com'. The block page can be shown to any visitor with the 'sfw_test_ip' parameter. This makes it possible for unauthenticated attackers to send users to an external site when they click the 'click to pass' link on a crafted URL.",
 "plugin": {
  "slug": "cleantalk-spam-protect",
  "name": "Anti-Spam by CleanTalk",
  "full_name": "Anti-Spam, Spam FireWall by CleanTalk",
  "wordpress_org": "https://wordpress.org/plugins/cleantalk-spam-protect/",
  "advisories_url": "https://wpsec.com/vuln/plugin/cleantalk-spam-protect/",
  "attacksurface": "https://attacksurface.wpsec.com/plugin/cleantalk-spam-protect"
 },
 "type": "REDIRECT",
 "cwe": [
  "CWE-601"
 ],
 "cve": [],
 "cvss": {
  "version": "3.1",
  "score": 6.1,
  "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
  "severity": "Medium"
 },
 "affected": {
  "ranges": [
   {
    "from": null,
    "from_inclusive": true,
    "to": "6.91",
    "to_inclusive": false
   }
  ],
  "text": [
   "all versions before 6.91"
  ]
 },
 "introduced_in": null,
 "fixed_in": "6.91",
 "remediation": "Update to 6.91 or later.",
 "fix_released": "2026-10-29T09:38:19+00:00",
 "published": "2026-10-30T09:42:55+00:00",
 "updated": "2026-10-29T17:46:25.364348+00:00",
 "also_published_as": null,
 "references": [
  "https://wpsec.com/vuln/WPSEC-2026-2021/",
  "https://plugins.svn.wordpress.org/cleantalk-spam-protect/tags/6.91/",
  "https://wordpress.org/plugins/cleantalk-spam-protect/"
 ],
 "attacksurface_url": "https://attacksurface.wpsec.com/plugin/cleantalk-spam-protect",
 "source": "WPSec",
 "license": {
  "name": "CC BY 4.0",
  "url": "https://creativecommons.org/licenses/by/4.0/"
 },
 "usage": {
  "plugin": "High",
  "affected_versions": "High",
  "as_of": "2026-10-30"
 }
}