WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
chatbot-chatgpt
Published
2025-10-17
Title
Kognetiks Chatbot < 2.3.6 - Unauthenticated Limited File Uploads and Conversation Erasing
Slug
chatbot-support-ai
Published
2024-08-13
Title
Chatbot Support AI <= 1.0.2 - Admin+ Stored XSS
Slug
chative-live-chat-and-chatbot
Published
2025-01-06
Title
Chative Live chat and Chatbot < 1.2 - Channel/Org ID Update via CSRF
Slug
chatlive
Published
2025-02-21
Title
CHATLIVE <= 2.0.1 - Unauthenticated SQL Injection
Slug
chatplusjp
Published
2024-10-21
Title
chatplusjp <= 1.02 - Reflected Cross-Site Scripting
Slug
chatpressai
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
chatra-live-chat
Published
2025-07-04
Title
Chatra Live Chat + ChatBot + Cart Saver <= 1.0.11 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
chatra-live-chat
Published
2026-07-07
Title
Chatra Live Chat + ChatBot + Cart Saver < 1.0.13 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'chatra-code' Setting
Slug
chatroll-live-chat
Published
2025-01-06
Title
Chatroll Live Chat < 2.6.0 - Contributor+ Stored XSS
Slug
chatter
Published
2024-11-28
Title
Chatter <= 1.0.1 - Missing Authorization
Slug
chatter
Published
2025-01-16
Title
Chatter <= 1.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
chatway-live-chat
Published
2026-06-05
Title
Chatway Live Chat – AI Chatbot, Customer Support, FAQ & Helpdesk Customer Service & Chat Buttons < 1.4.9 - Authenticated (Subscriber+) Information Exposure
Slug
chatwee
Published
2025-03-31
Title
Chat by Chatwee <= 2.1.3 - Missing Authorization
Slug
chatwee
Published
2025-09-29
Title
Chat by Chatwee <= 2.1.3 - Cross-Site Request Forgery to Settings Update
Slug
chaty
Published
2021-12-06
Title
Chaty Free < 2.8.3 & Pro < 2.8.2 - Reflected Cross-Site Scripting
Slug
chaty
Published
2022-04-08
Title
Floating Chat Widget < 2.8.4 - Admin+ Stored Cross-Site Scripting
Slug
chaty
Published
2022-11-14
Title
Chaty < 3.0.3 - Admin+ SQLi
Slug
chaty
Published
2023-06-26
Title
Floating Chat Widget < 3.1.2 - Admin+ Stored Cross-Site Scripting
Slug
chaty
Published
2023-05-16
Title
Chaty < 3.1 - Reflected XSS
Slug
chaty
Published
2023-05-16
Title
Chaty < 3.1 - Admin+ Stored Cross-Site Scripting
Slug
chaty
Published
2023-11-13
Title
Chaty < 3.1.3 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings
Slug
chaty
Published
2024-04-03
Title
Floating Chat Widget < 3.1.9 - Editor+ Stored XSS
Slug
chaty
Published
2024-05-23
Title
Floating Chat Widget < 3.2.3 - Admin+ Stored XSS
Slug
chaty
Published
2025-02-26
Title
Floating Chat Widget: Contact Chat Icons, Telegram Chat, Line Messenger, WeChat, Email, SMS, Call Button, WhatsApp – Chaty < 3.3.6 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting
Slug
chaty
Published
2026-02-24
Title
Floating Chat Widget: Contact Chat Icons, Telegram Chat, Line Messenger, WeChat, Email, SMS, Call Button – Chaty < 3.5.2 - Unauthenticated Information Exposure