Vulnerabilities / iChart – Easy Charts and Graphs
iChart – Easy Charts and Graphs vulnerabilities
Advisories WPSec published for iChart – Easy Charts and Graphs. Other sources may list more. Its attack surface: iChart – Easy Charts and Graphs on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-27 | WPSEC-2026-1724 | iChart – Easy Charts and Graphs <= 2.2.2 - Authenticated (Subscriber+) Missing Authorization to Arbitrary Post Duplication | Medium 5.4 | 2.2.3 |
| 2026-10-27 | WPSEC-2026-1723 | iChart – Easy Charts and Graphs <= 2.2.2 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary Post Modification via 'edit_post_id' Parameter | Medium 4.3 | 2.2.3 |
| 2026-10-27 | WPSEC-2026-1722 | iChart – Easy Charts and Graphs <= 2.2.2 - Authenticated (Subscriber+) Missing Authorization to Arbitrary Post Deletion | Medium 6.5 | 2.2.3 |
| 2026-10-27 | WPSEC-2026-1721 | iChart – Easy Charts and Graphs <= 2.2.2 - Authenticated (Subscriber+) Sensitive Information Exposure via qcld_ai_get_chart AJAX Action | Medium 4.3 | 2.2.3 |
License: CC BY 4.0