CVE-2026-1490

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

February 16, 2026

Last Seen

February 17, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical CleanTalk Plugin Vulnerability Enables Authorization Bypass on WordPress44.6

A critical vulnerability tracked as CVE-2026-1490 has been identified in the CleanTalk plugin for WordPress, allowing for authorization bypass via reverse DNS. This flaw affects thousands of WordPress installations that utilize the plugin for spam filtering and has been assigned a CVSS score of 9.8,...