What is GHSA-5543-49w7-m8jw?

GHSA-5543-49w7-m8jw is a security advisory published by GitHub Security Advisories with Medium severity. The CleanTalk WordPress plugin before 6.87 does not prevent unauthenticated, user-supplied...

Which CVE IDs does GHSA-5543-49w7-m8jw cover?

GHSA-5543-49w7-m8jw covers the following CVE IDs: CVE-2026-19855. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-5543-49w7-m8jw?

GHSA-5543-49w7-m8jw has a CVSS v3 base score of 6.5, published by GitHub Security Advisories.

GHSA-5543-49w7-m8jwMediumCVSS 6.5

The CleanTalk WordPress plugin before 6.87 does not prevent unauthenticated, user-supplied...

Vendor

GitHub Security Advisories

Published

September 9, 2026

Last Modified

September 9, 2026

🔗 CVE IDs covered (1)

CVE-2026-19855 →

📋 Description

The CleanTalk WordPress plugin before 6.87 does not prevent unauthenticated, user-supplied comment content from being passed to WordPress's shortcode engine, allowing any visitor to have arbitrary shortcodes registered on the site executed server-side and rendered to every subsequent visitor of the page.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-19855
https://wpscan.com/vulnerability/c27f3657-261a-46cd-860c-0bdf5c849190
https://github.com/advisories/GHSA-5543-49w7-m8jw