Medium CVE-2026-7795 The Click to Chat – WA Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the [chat] shortcode 'num' parameter in all versions up to, and including, 4.38. This is due to insufficient escaping when embedding user-supplied shortcode attribute values...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

[Medium] CVE-2026-7795 – The Click to Chat – WA Widget plugin for WordPress is vulnerable to Stored Cross...

VERWANDTEARTIKEL

CVE-2026-20245

CISA Adds Actively Exploited SolarWinds Serv-U DoS Flaw to KEV Catalog

Claude Opus Found a Four-Year-Old Hole in Zcash’s Privacy Layer. Nobody Knows If Someone Already Used It.

CISA Warns of SolarWinds Serv-U Vulnerability Exploited in Attacks

Critical Hugging Face Transformers Vulnerability Enables Remote Code Execution Attacks

[High] CVE-2026-9851 – The Booking Package plugin for WordPress is vulnerable to Privilege Escalation v...