CVE-2026-66593

WordPress Security & Malware scan by CleanTalk plugin <= 2.184 - SQL Injection vulnerability

Unauthenticated SQL Injection in Security & Malware scan by CleanTalk <= 2.184 versions.

We have discovered 936 live websites that are affected by CVE-2026-66593.

Run a Free Instant Scan



Affected Software

Product  Security Malware Firewall
Category Wordpress Plugins
Vulnerable Domains936 live websites (100% of Security Malware Firewall install base)
Vulnerable Versions
  • from 0 through 2.184
Vulnerable Versions Count100 versions ( 99% of all versions)


Common Weakness Enumeration

CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')



Details

  • Published - Aug 20, 2026
  • Updated - Aug 20, 2026

Credits

  • Noman Riffat | Patchstack Bug Bounty Program (finder)

Website Distribution by Country

Number of websites using CVE-2026-66593
United States299 websites


Germany79 websites
France52 websites
Italy42 websites
GB40 websites
Poland37 websites
Netherlands32 websites
Australia26 websites
Spain25 websites
Brazil23 websites

Website Distribution by TLD

Number of websites using CVE-2026-66593
.com399 websites
.org58 websites
.de34 websites
.nl29 websites
.it28 websites
.pl24 websites
.com.br24 websites
.net23 websites
.co.uk21 websites
.com.au21 websites

Vulnerable Versions

Vulnerable versions are highlighted in red

Websites affected by CVE-2026-66593

Top websites that are affected by CVE-2026-66593. Please click on the "Contact us" link to get more information.
DomainCountryRankContacts
************.com Singapore***,***
*******.com United States***,***
****.org Germany***,***
*********.org United States***,***
*********.com United States***,***
**********.com France***,***
******************.de Germany***,***
****.org United States***,***
******************.com United States***,***
*****.ch Switzerland***,***
See full domain list

FAQ

CVE-2026-66593 is Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in Security Malware Firewall
A total of 936 websites have been identified as vulnerable to CVE-2026-66593, based on global website indexing conducted by WebTechSurvey.
The Security Malware Firewall is affected by the CVE-2026-66593 vulnerability.
Security Malware Firewall versions up to and including 2.184 are vulnerable to CVE-2026-66593.