Extension WordPress
Vulnérabilités Chatbot for WordPress by Collect.chat ⚡️
Cette page rassemble les failles publiées pour Chatbot for WordPress by Collect.chat ⚡️, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Chatbot for WordPress by Collect.chat ⚡️
5 fiches
Chatbot for WordPress by Collect.chat ⚡️ <= 2.4.9 – Unauthenticated Stored Cross-Site Scripting
The Chatbot for WordPress by Collect.chat ⚡️ plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.4.9 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers…
*-2.4.9
2.5.0
21/04/2026
Chatbot for WordPress by Collect.chat ⚡️ <= 2.4.8 – Authenticated (Contributor+) Stored Cross-Site Scripting via Post Meta Field
The Chatbot for WordPress by Collect.chat plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the '_inpost_head_script[synth_header_script]' post meta field in all versions up to, and including, 2.4.8 due to insufficient input sanitization and output escaping. This…
*-2.4.8
2.4.9
13/02/2026
Chatbot for WordPress by Collect.chat ⚡️ <= 2.4.3 – Authenticated (Admin+) Stored Cross-Site Scripting
The Chatbot for WordPress by Collect.chat ⚡️ plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 2.4.3 due to insufficient input sanitization and output escaping. This makes it…
*-2.4.3
2.4.4
15/07/2024
collectchat <= 2.4.1 – Authenticated (Contributor+) Stored Cross-Site Scripting
The collectchat plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.4.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above,…
*-2.4.1
2.4.2
28/03/2024
Chatbot for WordPress <= 2.3.9 – Authenticated (Administrator+) Stored Cross-Site Scripting
The Chatbot for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in version 2.3.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and…
2.3.9
2.4.0
24/11/2023
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.