WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
chaty
Published
2022-11-14
Title
Chaty < 3.0.3 - Admin+ SQLi
Slug
chaty
Published
2023-06-26
Title
Floating Chat Widget < 3.1.2 - Admin+ Stored Cross-Site Scripting
Slug
chaty
Published
2023-05-16
Title
Chaty < 3.1 - Reflected XSS
Slug
chaty
Published
2023-05-16
Title
Chaty < 3.1 - Admin+ Stored Cross-Site Scripting
Slug
chaty
Published
2023-11-13
Title
Chaty < 3.1.3 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings
Slug
chaty
Published
2024-04-03
Title
Floating Chat Widget < 3.1.9 - Editor+ Stored XSS
Slug
chaty
Published
2024-05-23
Title
Floating Chat Widget < 3.2.3 - Admin+ Stored XSS
Slug
chaty
Published
2025-02-26
Title
Floating Chat Widget: Contact Chat Icons, Telegram Chat, Line Messenger, WeChat, Email, SMS, Call Button, WhatsApp – Chaty < 3.3.6 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting
Slug
chaty
Published
2026-02-24
Title
Floating Chat Widget: Contact Chat Icons, Telegram Chat, Line Messenger, WeChat, Email, SMS, Call Button – Chaty < 3.5.2 - Unauthenticated Information Exposure
Slug
chaty
Published
2026-09-10
Title
Floating Chat Widget: Contact Chat Icons, Telegram Chat, Line Messenger, WeChat, Email, SMS, Call Button < 3.6.0 - Reflected Cross-Site Scripting
Slug
chaty-pro
Published
2021-12-06
Title
Chaty Free < 2.8.3 & Pro < 2.8.2 - Reflected Cross-Site Scripting
Slug
chaty-pro
Published
2025-02-14
Title
Chaty Pro < 3.3.4 - Unauthenticated Arbitrary File Upload
Slug
chaty-pro
Published
2026-07-27
Title
Chaty Pro < 3.5.6 - Authenticated (Subscriber+) SQL Injection via 'widget_id' Parameter
Slug
chaty-pro
Published
2026-08-17
Title
Chaty Pro < 3.5.9 - Unauthenticated Stored Cross-Site Scripting
Slug
chauffeur-booking-system
Published
2024-03-29
Title
Chauffeur Taxi Booking System for WordPress < 7.3 - Unauthenticated Arbitrary File Upload
Slug
chauffeur-booking-system
Published
2024-05-19
Title
Chauffeur Taxi Booking System for WordPress < 7.0 - Authentication Bypass
Slug
check-email
Published
2016-11-12
Title
Check Email < 0.5.2 - Cross-Site Scripting (XSS)
Slug
check-email
Published
2021-09-27
Title
Check & Log Email < 1.0.3 - Admin+ SQL Injections
Slug
check-email
Published
2021-11-01
Title
Check & Log Email < 1.0.4 - Reflected Cross-Site Scripting
Slug
check-email
Published
2022-05-02
Title
Check & Log email < 1.0.6 - Reflected Cross-Site Scripting
Slug
check-email
Published
2024-03-25
Title
Check & Log Email < 1.0.10 - Unauthenticated Hook Injection
Slug
check-email
Published
2026-04-07
Title
Check & Log Email < 2.0.13 - Unauthenticated Stored XSS
Slug
check-email
Published
2026-07-13
Title
Check & Log Email < 2.0.15 - Admin+ SQL Injection via d and s Parameters
Slug
check-pincode-for-woocommerce
Published
2024-12-11
Title
Check Pincode For Woocommerce < 1.2 - Reflected Cross-Site Scripting
Slug
check-plagiarism
Published
2025-10-23
Title
Check Plagiarism <= 2.0 - Missing Authorization to Authenticated (Subscriber+) Settings Update