CVE-2024-13365

CRITICAL EXPLOITED

Security & Malware scan by CleanTalk < 2.150 - Unauthenticated Arbitrary File Upload via ZIP Archive Extraction

Title source: llm
STIX 2.1

Exploitation Summary

CVE-2024-13365 has been observed exploited in the wild (reported by VulnCheck KEV).

Description

The Security & Malware scan by CleanTalk plugin for WordPress is vulnerable to arbitrary file uploads due to the plugin uploading and extracting .zip archives when scanning them for malware through the checkUploadedArchive() function in all versions up to, and including, 2.149. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible.

References (2)

Core 2

Scores

CVSS v3 9.8
EPSS 0.0150
EPSS Percentile 71.0%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact total

Details

VulnCheck KEV 2026-05-05
CWE
CWE-434
Status published
Products (2)
cleantalk/Login Security, FireWall, Malware removal by CleanTalk < 2.149
cleantalk/security_\&_malware_scan < 2.150
Published Feb 12, 2025
Tracked Since Feb 18, 2026