| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2024-10390 | Elfsight Telegram Chat CC <= 1.1.0 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting | Elfsight | Elfsight Telegram Chat CC | Medium | 6.4 | 2024-11-18 16:31:32 | Deep Dive |
| CVE-2024-10533 | WP Chat App <= 3.6.8 - Missing Authorization to Authenticated (Subscriber+) Filebird Plugin Installation | ninjateam | WP Chat App | Medium | 4.3 | 2024-11-16 03:29:17 | Deep Dive |
| CVE-2022-20633 | Cisco Enterprise Chat and Email Username Enumeration Vulnerability | Cisco | Cisco Enterprise Chat and Email | Medium | 5.3 | 2024-11-15 16:15:01 | Deep Dive |
| CVE-2022-20632 | Cisco Enterprise Chat and Email Cross-Site Scripting Vulnerability | Cisco | Cisco Enterprise Chat and Email | Medium | 6.1 | 2024-11-15 16:14:53 | Deep Dive |
| CVE-2022-20631 | Cisco Enterprise Chat and Email Cross-Site Scripting Vulnerability | Cisco | Cisco Enterprise Chat and Email | Medium | 6.1 | 2024-11-15 16:03:37 | Deep Dive |
| CVE-2022-20634 | Cisco Enterprise Chat and Email Open Redirect Vulnerability | Cisco | Cisco Enterprise Chat and Email | Medium | 4.7 | 2024-11-15 16:02:17 | Deep Dive |
| CVE-2024-20484 | Cisco Enterprise Chat and Email Denial of Service Vulnerability | Cisco | Cisco Enterprise Chat and Email | High | 7.5 | 2024-11-06 16:29:21 | Deep Dive |
| CVE-2024-10232 | AtomChat <= 1.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via atomchat Shortcode | atomchat | Group Chat & Video Chat by AtomChat | Medium | 6.4 | 2024-11-01 09:29:25 | Deep Dive |
| CVE-2024-49639 | WordPress Monitor.chat plugin <= 1.1.1 - Reflected Cross Site Scripting (XSS) vulnerability | Edward Stoever | Monitor.chat | High | 7.1 | 2024-10-29 12:40:15 | Deep Dive |
| CVE-2024-10433 | Project Worlds Simple Web-Based Chat Application index.php cross site scripting | Project Worlds | Simple Web-Based Chat Application | Low | 3.5 | 2024-10-28 00:00:09 | Deep Dive |
| CVE-2024-10432 | Project Worlds Simple Web-Based Chat Application index.php sql injection | Project Worlds | Simple Web-Based Chat Application | High | 7.3 | 2024-10-27 23:31:04 | Deep Dive |
| CVE-2024-9628 | WPS Telegram Chat <= 4.6.0 - Authenticated (Subscriber+) Unauthorized Access to Telegram Bot API | wpsolution | WPS Telegram Chat | Medium | 6.3 | 2024-10-25 07:38:01 | Deep Dive |
| CVE-2024-9630 | WPS Telegram Chat <= 4.6.0 - Missing Authorization to Information Exposure | wpsolution | WPS Telegram Chat | Medium | 5.4 | 2024-10-25 07:38:00 | Deep Dive |
| CVE-2024-49605 | WordPress Community Lite Video Chat plugin <= 2.2 - CSRF to Stored XSS vulnerability | Stefan Nour | AVChat Video Chat | High | 7.1 | 2024-10-20 10:06:48 | Deep Dive |
| CVE-2024-10055 | Click to Chat – WP Support All-in-One Floating Widget <= 2.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpsaio_snapchat Shortcode | ninjateam | WP Click to Chat – Email, Live Chat, Call & Book Now Buttons | Medium | 6.4 | 2024-10-18 07:35:26 | Deep Dive |
| CVE-2024-49281 | WordPress Click to Chat – WP Support All-in-One Floating Widget plugin <= 2.3.3 - Cross Site Scripting (XSS) vulnerability | Ninja Team | Click to Chat – WP Support All-in-One Floating Widget | Medium | 6.5 | 2024-10-17 19:15:28 | Deep Dive |
| CVE-2022-4974 | Freemius SDK <= 2.4.2 - Missing Authorization Checks | dashlabsltd | YASR – Yet Another Star Rating Plugin for WordPress | Medium | 6.3 | 2024-10-16 06:43:30 | Deep Dive |
| CVE-2020-36838 | Facebook Chat Plugin <= 1.5 - Missing Capabilities Check | Facebook Chat Plugin – Live Chat Plugin for WordPress | High | 7.4 | 2024-10-16 06:43:28 | Deep Dive | |
| CVE-2024-42027 | Rocket.Chat 安全漏洞 | Rocket.Chat | Mobile | 中危 | - | 2024-10-07 12:46:16 | Deep Dive |
| CVE-2024-44018 | WordPress Instant Chat WP plugin <= 1.0.5 - Local File Inclusion vulnerability | istmoplugins | Instant Chat Floating Button for WordPress Websites | High | 7.5 | 2024-10-05 12:16:06 | Deep Dive |