Read the docs

Blue Coral

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Blue Coral records in CISA KEV

No Blue Coral vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Chat Bubble 3 records MEDIUM Advanced Flamingo 1 record LOW

Records

4 records

TI-2022-03153 CVE-2022-3415 · GHSA-3x5m-695g-v76h

Chat Bubble < 2.3 - Unauthenticated Stored Cross-Site Scripting

Priority MEDIUM 60

The Chat Bubble WordPress plugin before 2.3 does not sanitise and escape some contact parameters, which could allow unauthenticated attackers to set Stored Cross-Site Scripting payloads in them, which will trigger when a…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00577 Published 2022-11-14 Fixed in 2.3 CWE-79
TI-2023-26599 CVE-2023-48769 · GHSA-59wc-6pc8-jcr3

WordPress Chat Bubble Plugin <= 2.3 is vulnerable to Cross Site Request Forgery (CSRF)

Priority LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in Blue Coral Chat Bubble – Floating Chat with Contact Chat Icons, Messages, Telegram, Email, SMS, Call me back.This issue affects Chat Bubble – Floating Chat with Contact…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00262 Published 2023-12-18 No fix listed CWE-352
TI-2024-00827 CVE-2024-0898 · GHSA-962f-jpc6-g76g

Chat Bubble <= 2.3 - Authenticated (Administrator+) Stored Cross-Site Scripting

Priority LOW 22

The Chat Bubble – Floating Chat with Contact Chat Icons, Messages, Telegram, Email, SMS, Call me back plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and includ…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00398 Published 2024-03-13 No fix listed CWE-79
Open these records in search →