VYPR

Admin Chat Box

by WordPress

CVEs (1)

  • CVE-2026-8787HigMay 27, 2026
    risk 0.57cvss 8.8epss

    The Firebase Support & Chat Management plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 3.1.1. This is due to the `firebase_auth()` function authenticating the request as the WordPress user whose email is supplied in the…