Marcinlawrowski vulnerabilities
We track 2 vulnerabilities in Marcinlawrowski products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on June 17, 2025.
2vulnerabilities
0critical
2high
0exploited
7.3average CVSS score
Latest Marcinlawrowski vulnerabilities
- 7.2 High severity
Wise Chat: Improper Neutralization of Input During Web Page Generation
The Wise Chat plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the X-Forwarded-For header in all versions up to, and including, 3.3.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated at
- 7.5 High severity
Wise Chat: Exposure of Sensitive Information to an Unauthorized Actor
The Wise Chat plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.3.3 via the 'uploads' directory. This makes it possible for unauthenticated attackers to extract sensitive data stored insecurely in the