Vulnerabilities in collectchat

3 results

CVE-2023-5691MEDIUMThe Chatbot for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in version 2.3.9 due to insufEPSS 0.3%CVE-2026-0736MEDIUMChatbot for WordPress by Collect.chat ⚡️ <= 2.4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Meta FieldEPSS 0.3%CVE-2026-40765HIGHWordPress collectchat plugin <= 2.4.9 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%