Plugin icon

One to one user Chat by WPGuppy

wpguppy-lite

Vulnerabilities:

6

Last Updated:

March 12, 2026

Active Installs:

800

Published
Title
Fixed in
CVSS
Published
2026-02-13
Title
One to one user Chat by WPGuppy <= 1.1.4 - Unauthenticated Information Disclosure via Chat Message Interception
Fixed in
No known fix
CVSS
5.3 (medium)
Published
2025-08-14
Title
WPGuppy < 1.1.5 - Missing Authorization
Fixed in
Fixed in 1.1.5
CVSS
5.3 (medium)
Published
2025-03-27
Title
WPGuppy < 1.1.4 - Authenticated (Subscriber+) SQL Injection
Fixed in
Fixed in 1.1.4
CVSS
6.5 (medium)
Published
2025-01-09
Title
One to one user Chat by WPGuppy < 1.1.1 - Authorization Bypass
Fixed in
Fixed in 1.1.1
CVSS
5.3 (medium)
Published
2025-01-03
Title
WPGuppy < 1.1.1 - Unauthenticated PHP Object Injection
Fixed in
Fixed in 1.1.1
CVSS
9.8 (critical)
Published
2025-01-03
Title
WPGuppy < 1.1.1 - Subscriber+ Privilege Escalation
Fixed in
Fixed in 1.1.1
CVSS
8.8 (high)