CVE-2026-1253

The CVE concerns the WordPress plugin Group Chat & Video Chat by AtomChat. A missing capability check in the AJAX handlers atomchat_update_auth_ajax and atomchat_update_layout_ajax affects all versions up to and including 1.1.7. This allows authenticated users with Subscriber-level access and abo...

123.chat - Video Chat <= 1.3.1 - Unauthenticated Stored Cross-Site Scripting

Description The 123.chat - Video Chat plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 1.3.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in...

Chat-Video - MIT license, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Chat-Video published at the 'play' market has multiple vulnerabilities...