CVE-2026-81784

Unauthenticated PHP Object Injection in Wise Chat = 3.4 versions...

EUVD-2026-75517

Unauthenticated PHP Object Injection in Wise Chat = 3.4 versions...

CVE-2026-81784

An unauthenticated PHP Object Injection vulnerability affects the WordPress Wise Chat plugin in versions ≤ 3.4 , as discovered by Peng Zhou . The flaw allows a remote attacker with no prior access or user interaction to inject a crafted serialized object, leading to high impact on confidentiality...

CVE-2026-81784 WordPress Wise Chat plugin <= 3.4 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in Wise Chat = 3.4 versions...

CVE-2026-81784 WordPress Wise Chat plugin <= 3.4 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in Wise Chat = 3.4 versions...

CVE-2026-81784: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Wise Chat = 3.4 versions...

PT-2026-89431

Unauthenticated PHP Object Injection in Wise Chat = 3.4 versions...

WordPress Wise Chat plugin <= 3.4.1 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Peng Zhou in WordPress Plugin Wise Chat versions = 3.4.1...

CVE-2026-66636

Contributor Cross Site Scripting XSS in Wise Chat = 3.4 versions...

EUVD-2026-60921

Contributor Cross Site Scripting XSS in Wise Chat = 3.4 versions...

CVE-2026-66636 WordPress Wise Chat plugin <= 3.4 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting XSS in Wise Chat = 3.4 versions...

CVE-2026-66636

The WordPress Wise Chat plugin (versions ≤ 3.4) is vulnerable to contributor-level stored XSS, allowing authenticated users with contributor privileges to inject malicious scripts that execute in other users' browsers. CVSS 3.1 scores it MEDIUM (6.5) with network attack vector, low complexity, an...

CVE-2026-66636

Contributor Cross Site Scripting XSS in Wise Chat = 3.4 versions...

CVE-2026-66636 WordPress Wise Chat plugin <= 3.4 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting XSS in Wise Chat = 3.4 versions...

WordPress Wise Chat plugin <= 3.4 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Wise Chat versions = 3.4...

PT-2026-77064

Contributor Cross Site Scripting XSS in Wise Chat = 3.4 versions...

CVE-2026-66636: Improper Neutralization of Input During Web Page Generation

Contributor Cross Site Scripting XSS in Wise Chat = 3.4 versions...

EUVD-2019-16338

Malware in sbrugna...

EUVD-2023-36748

Malicious code in bioql PyPI...

CVE-2025-3774

The Wise Chat plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the X-Forwarded-For header in all versions up to, and including, 3.3.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scrip...