Read the docs

RumbleTalk

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

RumbleTalk records in CISA KEV

No RumbleTalk vulnerabilities are listed in CISA KEV.

Records

3 records

TI-2025-36294 CVE-2025-58626 · GHSA-5jc5-hr93-gqvq

WordPress RumbleTalk Live Group Chat Plugin <= 6.3.5 - Cross Site Scripting (XSS) Vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RumbleTalk RumbleTalk Live Group Chat rumbletalk-chat-a-chat-with-themes allows Stored XSS.This issue affects RumbleTa…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00169 Published 2025-09-03 No fix listed CWE-79
TI-2024-08089 CVE-2024-8720 · GHSA-4858-5pjv-4mwh

RumbleTalk Live Group Chat – HTML5 <= 6.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

Priority LOW 28

The RumbleTalk Live Group Chat – HTML5 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'rumbletalk-admin-button' shortcode in all versions up to, and including, 6.3.0 due to insufficien…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00335 Published 2024-10-01 No fix listed CWE-79
TI-2023-24588 CVE-2023-45828 · GHSA-23vc-r48x-wwpp

WordPress RumbleTalk Live Group Chat plugin <= 6.2.5 - Broken Access Control vulnerability

Priority LOW 26

Missing Authorization vulnerability in RumbleTalk RumbleTalk Live Group Chat rumbletalk-chat-a-chat-with-themes allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects RumbleTalk Live G…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00996 Published 2025-01-02 No fix listed CWE-862
Open these records in search →