Skip to content
PluginCanary

Anti-Spam, Spam FireWall by CleanTalk

by CleanTalk Inc · 200,000+ active installs · Checked 3 Nov 2026
Healthy4 Warnings

Healthy: vulnerability published 22 Oct 2026, fixed in 6.90.

87/ 100 Canary Score
Sub-scores for Anti-Spam, Spam FireWall by CleanTalk
Ownership100
Maintenance100
Security60
Support97
Reputation85

How the score works

Active signals

Facts we detected, with links to the source.

  • WarningSEC-1Vulnerability published 22 Oct 2026, fixed in 6.90. Update to version 6.90 or later.22 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 9 Oct 2026, fixed in 6.89. Update to version 6.89 or later.9 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 7 Sep 2026, fixed in 6.87. Update to version 6.87 or later.7 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 4 Sep 2026, fixed in 6.87. Update to version 6.87 or later.4 Sep 2026Evidence
  • InfoSEC-39 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
shagimuratov26 Aug 2016 to 29 Oct 2026, 284 commits
Safronik29 Aug 2016 to 12 May 2022, 1159 commits
sartemd17416 May 2017 to 17 Jul 2020, 99 commits
glomberg19 Jun 2019 to 8 Oct 2026, 342 commits
artemacleantalk24 Aug 2022 to 29 Sep 2023, 10 commits
alexandergull2 Nov 2022 to 5 Oct 2026, 46 commits
sergefcleantalk25 Dec 2023 to 17 Sep 2026, 41 commits
antonv18 Aug 2024 to 19 Aug 2026, 13 commits
cleantalk9 Dec 2025 to 18 Dec 2025, 2 commits
cleantalkplugins15 Oct 2026 to 29 Oct 2026, 4 commits

New committer cleantalkplugins made a first commit on 15 Oct 2026.

Maintenance

Last release
6 days ago
Releases, 24 months
64
Tested up to
7.1 current
Requires PHP
7.2 supported 8.2+
Releases per quarter for Anti-Spam, Spam FireWall by CleanTalk
Q1 20247
Q2 20249
Q3 20249
Q4 202411
Q1 20259
Q2 20258
Q3 20256
Q4 20259
Q1 20267
Q2 20269
Q3 20267
Q4 20264

Last release 29 Oct 2026. Tested with WordPress 7.1 (current).

Support

97% of 60 support threads resolved in the last 2 months.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
22 Oct 2026Anti-Spam by CleanTalk <= 6.89.1 - Unauthenticated Stored Cross-Site Scripting via 'user_email' Registration Parameter7.2<= 6.89.16.900
9 Oct 2026Anti-Spam by CleanTalk <= 6.88 - Unauthenticated Stored Cross-Site Scripting via Comment Content via ContactsEncoder Greedy Regex5.4<= 6.886.890
7 Sep 2026Spam protection, Honeypot, Anti-Spam by CleanTalk < 6.87 - Unauthenticated Arbitrary Shortcode Execution6.5< 6.876.870
4 Sep 2026Spam protection, Honeypot, Anti-Spam by CleanTalk <= 6.86 - Unauthenticated Stored Cross-Site Scripting via Comment Content aria-label Placeholder7.2<= 6.866.870
27 Jul 2026Spam protection, AntiSpam, FireWall by CleanTalk <= 6.82 - Unauthenticated Stored Cross-Site Scripting7.2<= 6.826.830
11 Jun 2026CleanTalk Anti-Spam. Spam Firewall & Bot protection < 6.79 - Unauthenticated Stored Cross-Site Scripting7.2< 6.796.790
14 Feb 2026Spam protection, Honeypot, Anti-Spam by CleanTalk <= 6.71 - Authorization Bypass via Reverse DNS (PTR record) Spoofing to Unauthenticated Arbitrary Plugin Installation9.8<= 6.716.720
25 Nov 2024Spam protection, Anti-Spam, FireWall by CleanTalk <= 6.43.2 - Authorization Bypass via Reverse DNS Spoofing to Unauthenticated Arbitrary Plugin Installation9.8<= 6.43.26.440
25 Nov 2024Spam protection, Anti-Spam, FireWall by CleanTalk <= 6.44 - Authorization Bypass due to Missing Empty Value Check to Unauthenticated Arbitrary Plugin Installation8.1<= 6.446.450
27 Dec 2023Spam protection, AntiSpam, FireWall by CleanTalk <= 6.20 - Cross-Site Request Forgery via apbct_settings__update_account_email4.3<= 6.206.210
27 Dec 2023Spam protection, AntiSpam, FireWall by CleanTalk <= 6.20 - Cross-Site Request Forgery4.3<= 6.206.210
22 Jun 2023Spam protection, AntiSpam, FireWall by CleanTalk <= 6.10 - Missing Authorization6.3<= 6.106.110
3 Oct 2022AntiSpam by CleanTalk <= 5.185 - Authenticated (Administrator+) SQL Injection7.2<= 5.1855.185.10
30 Mar 2022Spam protection, AntiSpam, FireWall by CleanTalk <= 5.173 - Reflected Cross-Site Scripting6.1<= 5.1735.174.10
30 Mar 2022Spam protection, AntiSpam, FireWall by CleanTalk <= 5.173 - Reflected Cross-Site Scripting6.1<= 5.1735.174.10
5 Mar 2021Spam protection, AntiSpam, FireWall by CleanTalk <= 5.153.3 - Unauthenticated Blind SQL Injection7.5<= 5.153.35.153.45
20 Nov 2020Anti-Spam by CleanTalk < 5.149 - Authenticated SQL Injection7.2< 5.1495.1490
12 Nov 2019Spam protection, AntiSpam, FireWall by CleanTalk <= 5.127.3 - Reflected Cross-Site Scripting6.1<= 5.127.35.127.40
25 Aug 2015Spam protection, AntiSpam, FireWall by CleanTalk < 5.22 - Reflected Cross-Site Scripting6.1< 5.225.22n/a

Source: Wordfence Intelligence.

Reputation

Average rating rose from 4.8 to 5.0 between Q3 2026 and Q4 2026.

Rating distribution
5 star2976
4 star40
3 star20
2 star26
1 star159
Latest low reviews

Momentum

200,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Anti-Spam, Spam FireWall by CleanTalk
4 May 20269,387
11 May 2026112,739
18 May 202639,755
25 May 2026214,387
1 Jun 202630,914
8 Jun 2026115,462
15 Jun 202632,809
22 Jun 2026112,331
29 Jun 202632,004
6 Jul 202621,864
13 Jul 2026219,169
20 Jul 2026128,695
27 Jul 202633,848
3 Aug 2026130,496
10 Aug 202625,805
17 Aug 2026130,679
24 Aug 202627,844
31 Aug 2026125,646
7 Sep 202627,448
14 Sep 2026123,076
21 Sep 202636,324
28 Sep 202616,647
5 Oct 2026230,408
12 Oct 2026131,814
19 Oct 202639,651
26 Oct 2026125,633
2 Nov 20268,566

Weekly downloads over the last 4 weeks are 10% below the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

hCaptcha for WPScore 94 · 70,000+ActiveLayer Anti-Spam: Spam Protection for Forms & CommentsScore 93 · 10,000+SilentShield - Captcha & Anti-Spam for WordPress (CF7, WPForms, Elementor, WooCommerce)Score 93 · 10,000+Akismet Anti-spam: Spam ProtectionScore 92 · 5,000,000+CryptXScore 92 · 10,000+

Facts

Version6.91
AuthorCleanTalk Inc
Added18 May 2012
Last updated29 Oct 2026
Active installs200,000+
Requires WordPress4.7
Tested up to7.1.4
Requires PHP7.2
CategorySecurity & Privacy > Security Scanning & Malware Protection
Tagsspam, antispam, comments, firewall, anti-spam

Other plugins by this author: Security Plugin, Firewall & Malware Scanner with Auto Removal, CleanTalk bbPress spam scanner, Spotfix - Report Website Errors, Typos & Public Chat

Questions

Is Anti-Spam, Spam FireWall by CleanTalk still maintained?

Anti-Spam, Spam FireWall by CleanTalk was last updated on 29 Oct 2026. Its Canary status is Healthy.

Is Anti-Spam, Spam FireWall by CleanTalk safe?

Anti-Spam, Spam FireWall by CleanTalk has no open unpatched vulnerabilities on record. 9 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.

Who owns Anti-Spam, Spam FireWall by CleanTalk?

The wordpress.org author is CleanTalk Inc. Recent committers: cleantalkplugins, shagimuratov, glomberg, alexandergull, sergefcleantalk. New committer cleantalkplugins made a first commit on 15 Oct 2026.

What can I use instead of Anti-Spam, Spam FireWall by CleanTalk?

Plugins in the same category with a higher Canary Score: hCaptcha for WP, ActiveLayer Anti-Spam: Spam Protection for Forms & Comments, SilentShield - Captcha & Anti-Spam for WordPress (CF7, WPForms, Elementor, WooCommerce), Akismet Anti-spam: Spam Protection, CryptX.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue