Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Marcin Clear all filters
TI-2026-67942 CVE-2026-39730 · GHSA-v3c7-wfpq-fjfx

Missing authorization in WordPress Wise Chat plugin

Priority LOW 31

Missing Authorization vulnerability in Marcin Wise Chat wise-chat allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Wise Chat: from n/a through 3.4.3.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00307 Published 2026-10-06 No fix listed CWE-862
TI-2026-47307 CVE-2026-66636 · GHSA-hxx2-grcw-j9mq

WordPress Wise Chat plugin <= 3.4.3 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Marcin Wise Chat wise-chat allows Stored XSS.This issue affects Wise Chat: from n/a through 3.4.3.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00224 Published 2026-08-18 No fix listed CWE-79