CVE-2026-3075

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Jeff Starr Simple Ajax Chat simple-ajax-chat allows Retrieve Embedded Sensitive Data.This issue affects Simple Ajax Chat: from n/a through <= 20251121.

Score

CVSS 3.1 5.3 Medium

Status

Deferred - audit@patchstack.com

Published

2026-02-23

Last modified

2026-04-28

Weaknesses

CWE-497

Affected products

• Simple Ajax Chat (Jeff Starr)

References

• https://patchstack.com/database/Wordpress/Plugin/simple-ajax-chat/vulnerability/wordpress-simple-ajax-chat-plugin-20251…