Wise Chat vulnerabilities

2 known vulnerabilities in Wise Chat from Marcinlawrowski. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  Wise Chat: Improper Neutralization of Input During Web Page Generation

  CVE-2025-3774Jun 17, 2025Marcinlawrowski

  The Wise Chat plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the X-Forwarded-For header in all versions up to, and including, 3.3.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated at

• 7.5 High severity

  Wise Chat: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2024-13613May 17, 2025Marcinlawrowski

  The Wise Chat plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.3.3 via the 'uploads' directory. This makes it possible for unauthenticated attackers to extract sensitive data stored insecurely in the