Is Security Plugin, Firewall & Malware Scanner with Auto Removal safe?

Every recorded flaw

• Aug 20, 2026Unauthenticated SQL Injection in Security & Malware scan by CleanTalk <= 2.184 versions.CVE-2026-66593 · affects up to 2.184 · reported by PatchstackCritical 9.3
• Dec 9, 2025Login Security, FireWall, Malware removal by CleanTalk: Stored Cross-Site ScriptingCVE-2025-13604 · affects up to 2.168 · reported by WordfenceHigh 7.2
• Feb 12, 2025Security & Malware scan by CleanTalk: Arbitrary file uploadsCVE-2024-13365 · affects up to 2.149 · reported by Wordfence1.6% oddsCritical 9.8
• Nov 26, 2024Security & Malware scan by CleanTalk: Unauthorized SQL InjectionCVE-2024-10570 · affects up to 2.145 · reported by WordfenceHigh 7.5
• Nov 27, 2023Security & Malware scan by CleanTalk: Retrieves client IP addresses from potentially untrusted headersCVE-2023-5239 · fixed in 2.121 · reported by WPScanHigh 7.5
• Oct 20, 2023Security & Malware scan by CleanTalk: Unauthorized user interactionCVE-2020-36698 · affects up to 2.50 · reported by Wordfence1.2% oddsHigh 8.8

Records come from the National Vulnerability Database, published by the researchers who found each flaw (Wordfence, Patchstack, WPScan and others); exploited status from CISA; exploit odds from FIRST’s EPSS; current version, installs and closures from wordpress.org, checked daily. Want every plugin on your site checked at once? Run the free website check.