CVE-2026-19855 | CleanTalk Plugin up to 6.86 on WordPress shortcode injection

September 9, 2026 Yanac

A vulnerability was found in CleanTalk Plugin up to 6.86 on WordPress. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component shortcode Handler. The manipulation results in injection.

This vulnerability is known as CVE-2026-19855. It is possible to launch the attack remotely. No exploit is available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More