VYPR

Floating Chat Widget

by Premio

CVEs (3)

  • CVE-2025-1450MedFeb 27, 2025
    risk 0.35cvss 6.4epss 0.00

    The Floating Chat Widget: Contact Chat Icons, Telegram Chat, Line Messenger, WeChat, Email, SMS, Call Button, WhatsApp – Chaty plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘data-hover’ parameter in all versions up to, and including, 3.3.5 due…

  • CVE-2024-4149MedJun 13, 2024
    risk 0.31cvss 4.8epss 0.00

    The Floating Chat Widget: Contact Chat Icons, WhatsApp, Telegram Chat, Line Messenger, WeChat, Email, SMS, Call Button WordPress plugin before 3.2.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored…

  • CVE-2024-2972LowApr 24, 2024
    risk 0.25cvss 3.8epss 0.00

    The Floating Chat Widget: Contact Chat Icons, WhatsApp, Telegram Chat, Line Messenger, WeChat, Email, SMS, Call Button WordPress plugin before 3.1.9 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored…