Read the docs

Jauhari Xelion

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Jauhari Xelion records in CISA KEV

No Jauhari Xelion vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2025-02670 CVE-2025-3058 · GHSA-243x-8mmp-f9jr

Xelion Webchat <= 9.1.0 - Authenticated (Subscriber+) Arbitrary Options Update

Priority MEDIUM 41

The Xelion Webchat plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the xwc_save_settings() function in all versions up to…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00476 Published 2025-04-24 No fix listed CWE-862
TI-2025-26284 CVE-2025-39542 · GHSA-82p7-64v9-fpv5

WordPress Xelion Webchat plugin <= 9.1.0 - Privilege Escalation Vulnerability

Priority MEDIUM 40

Incorrect Privilege Assignment vulnerability in Jauhari Xelion Xelion Webchat xelion-webchat allows Privilege Escalation.This issue affects Xelion Webchat: from n/a through <= 9.1.0.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00409 Published 2025-04-17 No fix listed CWE-266
Open these records in search →