CVE-2026-51367: Authorization Bypass Through User-Controlled Key

An issue in Bottinelli Informatica Vedo Suite v.1.2.5 allows a remote attacker to obtain sensitive information via the apivedo/chat endpoint and the utentechat parameter...

EUVD-2026-62481

SQL Injection vulnerability in Bottinelli Informatica Vedo Suite v.1.2.5 allows a remote attacker to execute arbitrary code via the apivedo/chat endpoint and the utentechat parameter...

CVE-2026-51367

Bottinelli Informatica Vedo Suite v.1.2.5 is affected by a vulnerability that allows a remote attacker to obtain sensitive information . The issue is reachable via the api_vedo/chat endpoint by manipulating the utente_chat parameter. While the provided documents characterize this as an authorizat...

CVE-2026-51366

A SQL Injection vulnerability exists in Bottinelli Informatica Vedo Suite v.1.2.5 . A remote attacker can exploit this flaw via the api_vedo/chat endpoint using the utente_chat parameter to achieve arbitrary code execution . The vulnerability is characterized by the improper neutralization of spe...

PT-2026-78357

Name of the Vulnerable Software and Affected Versions Bottinelli Informatica Vedo Suite version 1.2.5 Description A remote attacker can obtain sensitive information through the 'api vedo/chat' endpoint by manipulating the utente chat parameter. Recommendations At the moment, there is no informati...

CVE-2026-73187

Unauthenticated SQL Injection in Sticky Chat Widget = 1.4.2 versions...

CVE-2026-66636

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Marcin Wise Chat wise-chat allows Stored XSS.This issue affects Wise Chat: from n/a through 3.4.3...

CVE-2026-73187 WordPress Sticky Chat Widget plugin <= 1.4.2 - SQL Injection vulnerability

Unauthenticated SQL Injection in Sticky Chat Widget = 1.4.2 versions...

CVE-2026-73187

Unauthenticated SQL Injection in Sticky Chat Widget = 1.4.2 versions...

CVE-2026-73187 WordPress Sticky Chat Widget plugin <= 1.4.2 - SQL Injection vulnerability

Unauthenticated SQL Injection in Sticky Chat Widget = 1.4.2 versions...

EUVD-2026-60938

Unauthenticated SQL Injection in Sticky Chat Widget = 1.4.2 versions...

CVE-2026-73187

The WordPress Sticky Chat Widget plugin (versions ≤ 1.4.2) contains an unauthenticated SQL Injection vulnerability, discovered by Nguyen Ba Khanh of HPT Vietnam Corporation. CVSS 3.1 scores it 9.3 (Critical) for network-exploitable high confidentiality impact. CISA SSVC rates it automatable with ...

CVE-2026-66636 WordPress Wise Chat plugin <= 3.4.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Marcin Wise Chat wise-chat allows Stored XSS.This issue affects Wise Chat: from n/a through 3.4.3...

CVE-2026-66636 WordPress Wise Chat plugin <= 3.4.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Marcin Wise Chat wise-chat allows Stored XSS.This issue affects Wise Chat: from n/a through 3.4.3...

CVE-2026-66636

Contributor Cross Site Scripting XSS in Wise Chat = 3.4 versions...

CVE-2026-66636

The WordPress Wise Chat plugin (versions ≤ 3.4) is vulnerable to contributor-level stored XSS, allowing authenticated users with contributor privileges to inject malicious scripts that execute in other users' browsers. CVSS 3.1 scores it MEDIUM (6.5) with network attack vector, low complexity, an...

EUVD-2026-60921

Contributor Cross Site Scripting XSS in Wise Chat = 3.4 versions...

WordPress Wise Chat plugin <= 3.4 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Wise Chat versions = 3.4...

tomcat: Apache Tomcat: Denial of Service via WebSocket chat example

A flaw was found in Apache Tomcat. This uncontrolled resource consumption vulnerability, located in the WebSocket chat example, allows a remote attacker to cause a Denial of Service DoS by exhausting system resources. This can lead to the affected system becoming unresponsive or crashing...

WordPress Sticky Chat Widget plugin <= 1.4.2 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Nguyen Ba Khanh - HPT Vietnam Corporation in WordPress Plugin Sticky Chat Widget versions = 1.4.2...