CVE-2022-27850

Cross-Site Request Forgery CSRF in Simple Ajax Chat WordPress plugin = 20220115 allows an attacker to clear the chat log or delete a chat message...

CVE-2022-27849

Sensitive Information Disclosure sac-export.csv in Simple Ajax Chat WordPress plugin = 20220115...

CVE-2022-27850

Cross-Site Request Forgery CSRF in Simple Ajax Chat WordPress plugin = 20220115 allows an attacker to clear the chat log or delete a chat message...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF in Simple Ajax Chat WordPress plugin = 20220115 allows an attacker to clear the chat log or delete a chat message...

Information disclosure

Sensitive Information Disclosure sac-export.csv in Simple Ajax Chat WordPress plugin = 20220115...

CVE-2022-27850 WordPress Simple Ajax Chat plugin <= 20220115 - Multiple Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF in Simple Ajax Chat WordPress plugin = 20220115 allows an attacker to clear the chat log or delete a chat message...

CVE-2022-27850 WordPress Simple Ajax Chat plugin <= 20220115 - Multiple Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF in Simple Ajax Chat WordPress plugin = 20220115 allows an attacker to clear the chat log or delete a chat message...

CVE-2022-27850

CVE-2022-27850 : WordPress plugin Simple Ajax Chat contains a Cross-Site Request Forgery (CSRF) flaw up to version 20220115 that lets an attacker clear chat logs or delete messages. Public records note the vulnerable component is the plugin’s chat-management actions and that updating to at least ...

CVE-2022-27849 WordPress Simple Ajax Chat plugin <= 20220115 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure sac-export.csv in Simple Ajax Chat WordPress plugin = 20220115...

CVE-2022-27849 WordPress Simple Ajax Chat plugin <= 20220115 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure sac-export.csv in Simple Ajax Chat WordPress plugin = 20220115...

CVE-2022-27850

Cross-Site Request Forgery CSRF in Simple Ajax Chat WordPress plugin = 20220115 allows an attacker to clear the chat log or delete a chat message...

CVE-2022-27849

Sensitive Information Disclosure sac-export.csv in Simple Ajax Chat WordPress plugin = 20220115...

Simple Ajax Chat < 20220216 - Log Clearing & Arbitrary Chat Message Deletion via CSRF

The plugin does not have CSRF check in place when clearing chat logs and deleting a chat message, which could allow attackers to make a logged in admin perform such actions via a CSRF attack...

WordPress Simple Ajax Chat plugin <= 20220115 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered by Ex.Mi Patchstack in WordPress Simple Ajax Chat plugin versions = 20220115. Solution Update the WordPress Simple Ajax Chat plugin to the latest available version at least 20220216...

Wire server denial of service vulnerability

Wire is a chat software from the German company Wire. The software supports Web, WindowsiOS, Android, OS X platforms, has a group function, can voice calls, send photos and its original way of greeting PING. wire server has a denial of service vulnerability, the vulnerability stems from the syste...

WordPress 插件 Simple Ajax Chat跨站请求伪造漏洞

WordPress is a product of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress Simple Ajax Chat plugin has a cross-site request forgery vulnerability, whic...

WordPress Simple Ajax Chat plugin <= 20220115 - Multiple Cross-Site Request Forgery (CSRF) vulnerability

Multiple Cross-Site Request Forgery CSRF vulnerability discovered by Ex.Mi Patchstack in WordPress Simple Ajax Chat plugin versions = 20220115. Solution Update the WordPress Simple Ajax Chat plugin to the latest available version at least 20220216...

CVE-2021-27773

This vulnerability allows users to execute a clickjacking attack in the meeting's chat...

WordPress 插件 Simple Ajax Chat 信息泄露漏洞

WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress Simple Ajax Chat plugin has an information disclosure vulnerability, no detailed vulnerability details are provided...

chat.oasisoutfit.com Cross Site Scripting vulnerability OBB-2511733

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...