Back Cyberpress

Critical CleanTalk Plugin Flaw Allows Authorization Bypass on WordPress via Reverse DNS

Cyberpress • February 16, 2026

Tracked as CVE-2026-1490, this flaw affects thousands of WordPress installations using the plugin for spam filtering. With a CVSS score of 9.8, it ...

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical CleanTalk Plugin Vulnerability Enables Authorization Bypass on WordPress A critical vulnerability tracked as CVE-2026-1490 has been identified in the CleanTalk plugin for WordPress, allowing for authorization bypass via reverse DNS. This flaw affects thousands of WordPress installations that utilize the plugin for spam filtering and has been assigned a CVSS score of 9.8, indicating its severity. 4 sources 45

Extracted Entities

CVEs (1)

CVE-2026-1490

Platforms (1)

WordPress