CVE-2022-27849

The CVE-2022-27849 entry concerns WordPress Simple Ajax Chat plugin versions before 20220216, where unauthenticated users can access the sac-export.csv data due to improper access restrictions, leading to sensitive information disclosure. The connected Nuclei template confirms the basic vector (d...

CVE-2024-1983

CVE-2024-1983 affects the WordPress plugin Simple Ajax Chat (formerly Simple Ajax Chat – Add a Fast, Secure Chat Box). The Red Hat/NVD description (and related sources) state the issue is that the plugin does not prevent visitors from using malicious Names in chat, which are reflected unsanitized...