Simple Ajax Chat (Unknown) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2026-09-02. Vendor: Unknown.

CVEs of Simple Ajax Chat

• CVE-2026-81807 - CVSS 8.8 (high), 2026-09-02: The Simple Ajax Chat WordPress plugin before 20260827 does not escape chat message content before rendering it, allowing unauthenticated users to inject…
• CVE-2024-2470 - CVSS 5.4 (medium), 2024-06-04: The Simple Ajax Chat WordPress plugin before 20240412 does not sanitise and escape some of its settings, which could allow high privilege users such as admin…
• CVE-2024-1983 - CVSS 7.1 (high), 2024-03-20: The Simple Ajax Chat WordPress plugin before 20240223 does not prevent visitors from using malicious Names when using the chat, which will be reflected…