Vulnerabilities / WPChat
WPChat vulnerabilities
Advisories WPSec published for WPChat – Live Chat & Messaging Widget for Customer Support. Other sources may list more. Its attack surface: WPChat on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-11-13 | WPSEC-2026-3066 | WPChat <= 1.4.5 - Unauthenticated Sensitive Information Exposure via Settings REST Endpoint | Medium 5.3 | 1.4.6 |
| 2026-11-13 | WPSEC-2026-3065 | WPChat <= 1.4.5 - Unauthenticated Missing Authorization to Smart Search Offer Claim | Medium 5.3 | 1.4.6 |
| 2026-11-13 | WPSEC-2026-3064 | WPChat <= 1.4.5 - Unauthenticated Missing Authorization to API Access Token Update | Medium 5.3 | 1.4.6 |
License: CC BY 4.0