Skip to content
Threat Feed
Subscribe

Product

Simple Ajax Chat – Add a Fast, Secure Chat Box (<= 20260811)

1 brief RSS
high advisory

Stored XSS in Simple Ajax Chat WordPress Plugin via CVE-2026-81825

The Simple Ajax Chat plugin for WordPress contains a stored cross-site scripting vulnerability in versions <= 20260811, allowing unauthenticated attackers to inject malicious scripts due to exposed nonces and insufficient input sanitization.

Simple Ajax Chat – Add a Fast, Secure Chat Box xss web-security wordpress vulnerability
2t 1c