Vulnerabilities / Joinchat
Joinchat vulnerabilities
Advisories WPSec published for Joinchat – Enhanced “click to chat”. Other sources may list more. Its attack surface: Joinchat on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-14 | WPSEC-2026-0886 | Joinchat <= 6.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Joinchat Button Block 'message' Attribute | Medium 6.4 | 6.4.2 |
License: CC BY 4.0