Input validation vulnerability in Spam protection, Anti-Spam, FireWall by CleanTalk 6.20

The Spam protection, AntiSpam, FireWall by CleanTalk plugin for WordPress has a security flaw that could be exploited by unauthenticated attackers. This is because the plugin (up to version 6.20) did not properly validate certain data (called nonce) in the ‘apbct_settings__update_account_email’ function. This means that attackers could potentially update the account email address by convincing a site administrator to click on a malicious link.