Click n Chat < 1.1.3 - Unauthenticated SQL Injection

The Click n Chat Chat Widget Integration WordPress plugin before 1.1.3 does not sanitise sort parameters before using them in a SQL ORDER BY clause, allowing unauthenticated attackers to perform SQL injection attacks. id: CVE-2026-92998 info: name: Click n Chat 1.1.3 - Unauthenticated SQL Injecti...