CVE-2025-9948: Cross-Site Request Forgery (CSRF)

The Chat by Chatwee plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.1.3. This is due to missing or incorrect nonce validation on the admin settings page. This makes it possible for unauthenticated attackers to modify plugin settings via a...

CVE-2025-31596: Missing Authorization

Missing Authorization vulnerability in Chatwee Chat by Chatwee chatwee allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Chat by Chatwee: from n/a through = 2.1.3...

PT-2025-13743

Name of the Vulnerable Software and Affected Versions Chat by Chatwee versions 2.1.3 and earlier Description The issue is related to a Missing Authorization vulnerability, which allows for the exploitation of incorrectly configured access control security levels. Recommendations For versions 2.1....

WordPress plugin Chat by Chatwee has a security vulnerability.

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exis...