anonhaven

CVE-2026-92997

NONE EPSS 0.18%
Updated Oct 21, 2026
WordPress
Parameter Value
Affected Versions before 1.1.3
Type CWE-89 SQL Injection
Vendor WordPress
Public PoC No

The Click n Chat (Chat Widget Integration) WordPress plugin before 1.1.3 does not properly validate a parameter before using it as a column identifier in a SQL query, allowing unauthenticated attackers to perform SQL injection attacks.

Weakness Type (CWE)

CWE-89 SQL Injection

Vulnerable Products

unknown:click n chat (chat widget integration)

References 1

https://wpscan.com/vulnerability/2b7edbc9-9562-46a7-95f6-fa4336e5c4c3/
contact@wpscan.com
Share Post Share Share Share

Related Vulnerabilities

CVE-2026-110369

WordPress

8.8

CVE-2026-85683

WordPress

8.8

CVE-2026-14556

WordPress

5.4

CVE-2026-107447

WordPress

5.3

CVE-2026-105256

WordPress

5.3