Unrated severityNVD Advisory· Published Oct 21, 2026

CVE-2026-92999

Description

The Click n Chat (Chat Widget Integration) WordPress plugin before 1.1.3 does not perform any authorization check on a lead-export handler, allowing unauthenticated users to download every captured contact record (names, email addresses and phone numbers).

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Click n Chatllm-fuzzy
Range: <1.1.3

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/9f3723c9-40e3-4eb6-b0f9-139fb2c9df52/nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000