Kainex

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Kainex records in CISA KEV

No Kainex vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Wise Chat 1 record LOW Wise Forms 1 record MEDIUM

Records

3 records

TI-2024-12644 CVE-2024-13603 · GHSA-52h4-gx23-qjqh

Wise Forms <= 1.2.0 - Unauthenticated Stored XSS

MEDIUM 60

The Wise Forms WordPress plugin through 1.2.0 does not sanitise and escape some of its settings, which could allow unauthenticated users to perform Stored Cross-Site Scripting attacks via malicious form submissions.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0038 Published 2025-02-17 No fix listed CWE-79

TI-2024-12654 CVE-2024-13613 · GHSA-qgqc-rq6c-2qmp

Wise Chat <= 3.3.3 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory

LOW 39

The Wise Chat plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.3.3 via the 'uploads' directory.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00489 Published 2025-05-17 No fix listed CWE-200

TI-2023-15786 CVE-2023-32504 · GHSA-7268-qqjc-4287

WordPress Wise Chat Plugin <= 3.1.3 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in Kainex Wise Chat.This issue affects Wise Chat: from n/a through 3.1.3.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00321 Published 2023-11-18 No fix listed CWE-352

Open these records in search →

Critical	0
High	2
Medium	1
Low	0
No CVSS	0