CVE-2025-10705

The MxChat – AI Chatbot for WordPress plugin for WordPress is vulnerable to Blind Server-Side Request Forgery in all versions up to, and including, 2.4.6. This is due to insufficient validation of user-supplied URLs in the PDF processing functionality. This makes it possible for unauthenticated...

PT-2025-43508

Name of the Vulnerable Software and Affected Versions MxChat – AI Chatbot for WordPress plugin for WordPress versions up to and including 2.4.6 Description The software is susceptible to a Blind Server-Side Request Forgery due to inadequate validation of user-provided URLs within the PDF processi...