Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Blue Coral Component: Chat Bubble Clear all filters
TI-2024-00827 CVE-2024-0898 · GHSA-962f-jpc6-g76g

Chat Bubble <= 2.3 - Authenticated (Administrator+) Stored Cross-Site Scripting

Priority LOW 22

The Chat Bubble – Floating Chat with Contact Chat Icons, Messages, Telegram, Email, SMS, Call me back plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and includ…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00398 Published 2024-03-13 No fix listed CWE-79
TI-2023-26599 CVE-2023-48769 · GHSA-59wc-6pc8-jcr3

WordPress Chat Bubble Plugin <= 2.3 is vulnerable to Cross Site Request Forgery (CSRF)

Priority LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in Blue Coral Chat Bubble – Floating Chat with Contact Chat Icons, Messages, Telegram, Email, SMS, Call me back.This issue affects Chat Bubble – Floating Chat with Contact…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00262 Published 2023-12-18 No fix listed CWE-352
TI-2022-03153 CVE-2022-3415 · GHSA-3x5m-695g-v76h

Chat Bubble < 2.3 - Unauthenticated Stored Cross-Site Scripting

Priority MEDIUM 60

The Chat Bubble WordPress plugin before 2.3 does not sanitise and escape some contact parameters, which could allow unauthenticated attackers to set Stored Cross-Site Scripting payloads in them, which will trigger when a…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00577 Published 2022-11-14 Fixed in 2.3 CWE-79