Chaty Pro
Chaty Pro is a WordPress component with 2 published CVE records in this archive. The latest tracked vulnerability was published Jul 28, 2026; the highest CVE/CNA score is 10.
chaty-proCVE-2026-6251: Chaty Pro subscribers can perform time-based blind SQL injection
Chaty Pro through 3.5.5 lets any authenticated user, including a Subscriber, submit a widget_id value that fetch_custom_field() in admin/class-admin-base.php concatenates directly into a numeric SQL context without $wpdb->prepare() or integer casting. The query executes before the function checks its nonce, so that later check does not protect the database operation. Time-based blind SQL injection can disclose sensitive WordPress database contents. The CNA record does not disclose the request endpoint or AJAX action, and the referenced upstream source is no longer publicly available.
| Safe version |
|
||
|---|---|---|---|
| Jul 28, 2026 |
CVE-2026-6251
Chaty Pro subscribers can perform time-based blind SQL injection
Chaty Pro through 3.5.5 lets any authenticated user, including a Subscriber, submit a widget_id value that fetch_custom_field() in admin/class-admin-base.php concatenates directly into a numeric SQL context without $wpdb->prepare() or integer casting. The query executes before the function checks its nonce, so that later check does not protect the database operation. Time-based blind SQL injection can disclose sensitive WordPress database contents. The CNA record does not disclose the request endpoint or AJAX action, and the referenced upstream source is no longer publicly available.
|
> 3.5.5 |
CVE6.5
NVDPending
|
| Feb 22, 2025 |
CVE-2025-26776
Chaty Pro: Dangerous file upload
Chaty Pro is affected by dangerous file upload. Exposure depends on how the affected operation is made reachable by the site. Successful exploitation can place attacker-controlled executable content on the server and may lead to full site compromise.
|
See mitigation notes |
CVE10.0
NVDPending
|