Veille CVE

Mercredi 21 octobre 2026

3 CVE

Critique 0 Élevée 2 Moyenne 1 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Unknown Click n Chat (Chat Widget Integration) » ✕
  1. CVE-2026-92999 5.3 Moyenne

    Unknown Click n Chat (Chat Widget Integration)

    The Click n Chat (Chat Widget Integration) WordPress plugin before 1.1.3 does not perform any authorization check on a lead-export handler, allowing unauthenticated users to download every captured contact record (names, email addresses and phone numbers).

  2. CVE-2026-92998 8.6 Élevée

    Unknown Click n Chat (Chat Widget Integration)

    The Click n Chat (Chat Widget Integration) WordPress plugin before 1.1.3 does not sanitise sort parameters before using them in a SQL ORDER BY clause, allowing unauthenticated attackers to perform SQL injection attacks.

  3. CVE-2026-92997 8.6 Élevée

    Unknown Click n Chat (Chat Widget Integration)

    The Click n Chat (Chat Widget Integration) WordPress plugin before 1.1.3 does not properly validate a parameter before using it as a column identifier in a SQL query, allowing unauthenticated attackers to perform SQL injection attacks.