specialk

Records45All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high9CVSS 7.0–8.9

Exploited now

specialk records in CISA KEV

No specialk vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

User Submitted Posts 6 records MEDIUM Simple Ajax Chat 5 records MEDIUM Dashboard Widget Suite 2 records LOW Prismatic 2 records LOW Simple Download Counter 2 records LOW Theme Switcha 2 records LOW Blackhole For Bad Bots 1 record MEDIUM Contact Form X 1 record LOW

Records

5 records in Simple Ajax Chat · all components

TI-2024-01845 CVE-2024-1983 · GHSA-m8qw-mppg-7364

Simple Ajax Chat < 20240223 - Unauthenticated Stored XSS

MEDIUM 64

The Simple Ajax Chat WordPress plugin before 20240223 does not prevent visitors from using malicious Names when using the chat, which will be reflected unsanitized to other users.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00452 Published 2024-03-20 Fixed in 20240223

TI-2024-02296 CVE-2024-2470 · GHSA-5g6x-fqcp-phwv

Simple Ajax Chat < 20240412 - Admin+ Stored XSS

MEDIUM 58

The Simple Ajax Chat WordPress plugin before 20240412 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the u…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00333 Published 2024-06-04 Fixed in 20240412 CWE-79

TI-2022-10732 CVE-2022-27849 · GHSA-hvgg-fv94-2fwq

WordPress Simple Ajax Chat plugin <= 20220115 - Sensitive Information Disclosure vulnerability

MEDIUM 46

Sensitive Information Disclosure (sac-export.csv) in Simple Ajax Chat (WordPress plugin) <= 20220115

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.04619 Published 2022-04-15 No fix listed CWE-200

TI-2022-09200 CVE-2022-25610 · GHSA-c838-r8f2-9r8x

WordPress Simple Ajax Chat plugin <= 20220115 - Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability

LOW 28

Unauthenticated Stored Cross-Site Scripting (XSS) in Simple Ajax Chat <= 20220115 allows an attacker to store the malicious code.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0072 Published 2022-03-25 No fix listed CWE-79

TI-2022-10733 CVE-2022-27850 · GHSA-q5jr-9g29-g3mv

WordPress Simple Ajax Chat plugin <= 20220115 - Multiple Cross-Site Request Forgery (CSRF) vulnerability

LOW 25

Cross-Site Request Forgery (CSRF) in Simple Ajax Chat (WordPress plugin) <= 20220115 allows an attacker to clear the chat log or delete a chat message.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00397 Published 2022-04-15 No fix listed CWE-352

Open these records in search →

Critical	3
High	9
Medium	33
Low	0
No CVSS	0