Filtered by vendor Autochat Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2025-12043 2 Autochat, Wordpress 2 Automatic Conversation, Wordpress 2025-11-26 5.3 Medium
The Autochat Automatic Conversation plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'wp_ajax_nopriv_auycht_saveCid' AJAX endpoint in all versions up to, and including, 1.1.9. This makes it possible for unauthenticated attackers to connect and disconnect the client ID.
CVE-2023-3041 1 Autochat 1 Automatic Conversation 2025-05-05 6.1 Medium
The Autochat Automatic Conversation WordPress plugin through 1.1.7 does not sanitise and escape user input before outputting it back on the page, leading to a cross-site Scripting attack.