Advisories · Technology
MxChat – AI Chatbot & Content Generation for WordPress.
Every CVE that names MxChat – AI Chatbot & Content Generation for WordPress among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.2 High
MxChat <= 3.2.25 - Unauthenticated Stored DOM-Based Cross-Site Scripting via 'feedback' Parameter via mxchat_save_rating
- MxChat – AI Chatbot & Content Generation for WordPress
- Cross-site scripting (XSS)
- CVSS 4.4 Medium
MxChat <= 3.2.10 - Authenticated (Admin+) Stored Cross-Site Scripting via 'intro_message' Setting
- MxChat – AI Chatbot & Content Generation for WordPress
- Cross-site scripting (XSS)
- CVSS 5.3 Medium
MxChat – AI Chatbot for WordPress <= 2.5.5 - Unauthenticated Information Exposure
- MxChat – AI Chatbot & Content Generation for WordPress
- Information disclosure
- CVSS 5.3 Medium
MxChat – AI Chatbot for WordPress <= 2.4.6 - Unauthenticated Blind Server-Side Request Forgery
- MxChat – AI Chatbot & Content Generation for WordPress
- Server-side request forgery (SSRF)