Lucene search
+L

3609 matches found

Vulnrichment
Vulnrichment
•added 2026/07/10 4:31 a.m.•15 views

CVE-2026-15291 Chat Help – Click to Chat Button & Form <= 3.1.3 - Missing Authorization to Unauthenticated Sensitive Information Exposure

The Chat Help – Click to Chat Button & Form plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.1.3 via the REST API endpoints /wp-json/chat-help/v1/leads and /wp-json/chat-help/v1/leads/id. This is due to the plugin not performing any...

7.5CVSS6.1AI score0.0066EPSS
SaveExploits0References6
attackerkb
attackerkb
•added 2026/07/10 4:31 a.m.•16 views

CVE-2026-15291

The Chat Help – Click to Chat Button & Form plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.1.3 via the REST API endpoints /wp-json/chat-help/v1/leads and /wp-json/chat-help/v1/leads/id. This is due to the plugin not performing any...

7.5CVSS5.9AI score0.0066EPSS
SaveExploits0References7
EUVD
EUVD
•added 2026/07/10 4:31 a.m.•21 views

EUVD-2026-42800

The Chat Help – Click to Chat Button & Form plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.1.3 via the REST API endpoints /wp-json/chat-help/v1/leads and /wp-json/chat-help/v1/leads/id. This is due to the plugin not performing any...

7.5CVSS5.9AI score0.0066EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/07/10 4:31 a.m.•45 views

CVE-2026-15291 Chat Help – Click to Chat Button & Form <= 3.1.3 - Missing Authorization to Unauthenticated Sensitive Information Exposure

The Chat Help – Click to Chat Button & Form plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.1.3 via the REST API endpoints /wp-json/chat-help/v1/leads and /wp-json/chat-help/v1/leads/id. This is due to the plugin not performing any...

7.5CVSS0.0066EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/07/10 12:00 a.m.•40 views

PT-2026-57068

The Chat Help – Click to Chat Button & Form plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.1.3 via the REST API endpoints /wp-json/chat-help/v1/leads and /wp-json/chat-help/v1/leads/id. This is due to the plugin not performing any...

7.5CVSS6.1AI score0.0066EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/10 12:00 a.m.•0 views

CVE-2026-15291: Missing Authorization

The Chat Help – Click to Chat Button & Form plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.1.3 via the REST API endpoints /wp-json/chat-help/v1/leads and /wp-json/chat-help/v1/leads/id. This is due to the plugin not performing any...

7.5CVSS5.7AI score0.0066EPSS
SaveExploits0References2
NVD
NVD
•added 2026/06/30 8:17 p.m.•22 views

CVE-2026-11595

IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to obtain sensitive information from the administrative console's integrated help system...

7.5CVSS0.0078EPSS
SaveExploits0References1
NVD
NVD
•added 2026/06/30 8:17 p.m.•23 views

CVE-2026-11712

IBM WebSphere Application Server 9.0, and 8.5 is affected by a cross-site scripting vulnerability in the administrative console help system...

9.3CVSS0.00384EPSS
SaveExploits0References1
CVE
CVE
•added 2026/06/30 7:50 p.m.•59 views

CVE-2026-11595

CVE-2026-11595 affects IBM WebSphere Application Server 9.0 and 8.5. The IBM Security Bulletin describes a path traversal vulnerability in the administrative console’s integrated help system that could allow a remote attacker to obtain sensitive information. Affected products/versions include Web...

7.5CVSS5.8AI score0.0078EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2026/06/30 7:50 p.m.•13 views

CVE-2026-11595 IBM WebSphere Application Server is affected by a Path Traversal vulnerability

IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to obtain sensitive information from the administrative console's integrated help system...

4.3CVSS5.8AI score0.0078EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/06/30 7:50 p.m.•13 views

CVE-2026-11595

IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to obtain sensitive information from the administrative console's integrated help system...

4.3CVSS5.8AI score0.0078EPSS
SaveExploits0References2Affected Software1
EUVD
EUVD
•added 2026/06/30 7:50 p.m.•17 views

EUVD-2026-40398

IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to obtain sensitive information from the administrative console's integrated help system...

4.3CVSS5.8AI score0.0078EPSS
SaveExploits0References1
CVE
CVE
•added 2026/06/30 7:47 p.m.•77 views

CVE-2026-11708

IBM WebSphere Application Server 9.0 and 8.5 are affected by a cross-site scripting vulnerability in the administrative console's integrated help system (CVE-2026-11708). Root cause described in the IBM bulletin is improper neutralization of input in the help system. Impact per the sources indica...

9.3CVSS5.6AI score0.00384EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2026/06/30 7:47 p.m.•51 views

CVE-2026-11708 IBM WebSphere Application Server is affected by a cross-site scripting vulnerability

IBM WebSphere Application Server 9.0, and 8.5 is affected by a cross-site scripting vulnerability in the administrative console's integrated help system...

9.3CVSS0.00384EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/06/30 7:47 p.m.•14 views

CVE-2026-11708

IBM WebSphere Application Server 9.0, and 8.5 is affected by a cross-site scripting vulnerability in the administrative console's integrated help system...

9.3CVSS5.6AI score0.00384EPSS
SaveExploits0References2Affected Software1
EUVD
EUVD
•added 2026/06/30 7:47 p.m.•19 views

EUVD-2026-40397

IBM WebSphere Application Server 9.0, and 8.5 is affected by a cross-site scripting vulnerability in the administrative console's integrated help system...

9.3CVSS5.6AI score0.00384EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/06/30 7:47 p.m.•20 views

CVE-2026-11708 IBM WebSphere Application Server is affected by a cross-site scripting vulnerability

IBM WebSphere Application Server 9.0, and 8.5 is affected by a cross-site scripting vulnerability in the administrative console's integrated help system...

9.3CVSS5.6AI score0.00384EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/06/30 7:45 p.m.•20 views

EUVD-2026-40396

IBM WebSphere Application Server 9.0, and 8.5 is affected by a cross-site scripting vulnerability in the administrative console help system...

9.3CVSS5.6AI score0.00384EPSS
SaveExploits0References1
CVE
CVE
•added 2026/06/30 7:45 p.m.•103 views

CVE-2026-11712

CVE-2026-11712 affects IBM WebSphere Application Server 9.0 and 8.5, with a cross-site scripting vulnerability in the administrative console help system. IBM security bulletin and multiple sources (IBM pages for WebSphere vulnerabilities) identify CVSS v3.1 base score of 9.3, indicating high impa...

9.3CVSS5.6AI score0.00384EPSS
SaveExploits0References1Affected Software1
attackerkb
attackerkb
•added 2026/06/30 7:45 p.m.•11 views

CVE-2026-11712

IBM WebSphere Application Server 9.0, and 8.5 is affected by a cross-site scripting vulnerability in the administrative console help system...

9.3CVSS5.6AI score0.00384EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder