All 2 CVE vulnerabilities found in ChatHelp – Click to Chat Button, WooCommerce Chat to Order & Floating Chat Form, with AI-generated Chinese analysis, references, and POCs.
Vendor: themeatelier
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-15759 | ChatHelp <= 3.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'number' and 'group' Shortcode Attributes CWE-79 | 6.4 | Medium | 2026-07-17 |
| CVE-2026-15291 | Chat Help – Click to Chat Button & Form <= 3.1.3 - Missing Authorization to Unauthenticated Sensitive Information Exposure CWE-862 | 7.5 | High | 2026-07-10 |
All 2 known CVE vulnerabilities affecting ChatHelp – Click to Chat Button, WooCommerce Chat to Order & Floating Chat Form with full Chinese analysis, references, and POCs where available.