All 3 CVE vulnerabilities found in MxChat – AI Chatbot & Content Generation for WordPress, with AI-generated Chinese analysis, references, and POCs.
Vendor: mxchat
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-13005 | MxChat <= 3.2.10 - Authenticated (Admin+) Stored Cross-Site Scripting via 'intro_message' Setting CWE-79 | 4.4 | Medium | 2026-07-16 |
| CVE-2025-12585 | MxChat – AI Chatbot for WordPress <= 2.5.5 - Unauthenticated Information Exposure CWE-200 | 5.3 | Medium | 2025-12-03 |
| CVE-2025-10705 | MxChat – AI Chatbot for WordPress <= 2.4.6 - Unauthenticated Blind Server-Side Request Forgery CWE-918 | 5.3 | Medium | 2025-10-23 |
All 3 known CVE vulnerabilities affecting MxChat – AI Chatbot & Content Generation for WordPress with full Chinese analysis, references, and POCs where available.