Skip to content
Threat Feed
Subscribe

Product

Sticky Chat Widget (<= 1.4.2)

1 brief RSS
high advisory

SQL Injection in Sticky Chat Widget WordPress Plugin

The Sticky Chat Widget plugin for WordPress (<= 1.4.2) is vulnerable to unauthenticated SQL injection via the 'scw_save_form_data' AJAX action, allowing potential exfiltration of sensitive database information.

Sticky Chat Widget web-application-vulnerability sqli wordpress
1r 1t 1c