WordPress Autochat Automatic Conversation plugin <= 1.1.9 - Missing Authorization to Unauthenticated Settings Update vulnerability

Missing Authorization to Unauthenticated Settings Update vulnerability discovered by Legion Hunter in WordPress Plugin Autochat Automatic Conversation versions = 1.1.9...

CVE-2025-12043: Missing Authorization

The Autochat Automatic Conversation plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'wpajaxnoprivauychtsaveCid' AJAX endpoint in all versions up to, and including, 1.1.9. This makes it possible for unauthenticated attackers to conne...

WordPress plugin Autochat Automatic Conversation 安全漏洞

WordPress Autochat Automatic Conversation plugin is an automated chat plugin designed for WordPress, which is mainly used to automate the communication between website visitors and merchants. WordPress Autochat Automatic Conversation plugin suffers from an unauthorized data modification...

CVE-2023-3041

CVE-2023-3041 concerns the Autochat Automatic Conversation WordPress plugin (versions

CVE-2023-3041: Undefined Security Weakness

The Autochat Automatic Conversation WordPress plugin through 1.1.7 does not sanitise and escape user input before outputting it back on the page, leading to a cross-site Scripting attack...

WordPress Autochat Automatic Conversation Plugin <= 1.1.7 is vulnerable to Cross Site Scripting (XSS)

Software Autochat Automatic Conversation Type Plugin Vulnerable versions = 1.1.7 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-3041 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID 29d0f8361ae6 Credits Rafael B...