WordPress security by component
Simple Ajax Chat
Plugin description
Simple Ajax Chat is a WordPress component with 7 published CVE records in this archive. The latest tracked vulnerability was published Mar 12, 2026; the highest CVE/CNA score is 7.1.
Plugin slug:
simple-ajax-chatLatest vulnerability
CVE-2026-2987: Simple Ajax Chat: Cross-site scripting
Simple Ajax Chat is affected by cross-site scripting. The vulnerable path is reachable without authentication. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
| Safe version |
|
||
|---|---|---|---|
| Mar 12, 2026 |
CVE-2026-2987
Simple Ajax Chat: Cross-site scripting
Simple Ajax Chat is affected by cross-site scripting. The vulnerable path is reachable without authentication. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
|
See mitigation notes |
CVE6.1
NVDPending
|
| Feb 23, 2026 |
CVE-2026-3075
Simple Ajax Chat: A security weakness
Simple Ajax Chat is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
|
See mitigation notes |
CVE5.3
NVDPending
|
| Jun 04, 2024 |
CVE-2024-2470
Simple Ajax Chat: Cross-site scripting
Simple Ajax Chat is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
|
See mitigation notes |
CVE5.4
NVDPending
|
| Mar 20, 2024 |
CVE-2024-1983
Simple Ajax Chat: A security weakness
Simple Ajax Chat is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
|
See mitigation notes |
CVE7.1
NVDPending
|
| Apr 15, 2022 |
CVE-2022-27850
Simple Ajax Chat: Cross-site request forgery
Simple Ajax Chat is affected by cross-site request forgery. Exposure depends on how the affected operation is made reachable by the site. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.
|
See mitigation notes |
CVE5.4
NVD4.3
|
| Apr 15, 2022 |
CVE-2022-27849
Simple Ajax Chat: Sensitive information exposure
Simple Ajax Chat is affected by sensitive information exposure. Exposure depends on how the affected operation is made reachable by the site. Successful exploitation can disclose data that should not be available to the caller.
|
See mitigation notes |
CVE5.3
NVD7.5
|
| Mar 25, 2022 |
CVE-2022-25610
Simple Ajax Chat: Cross-site scripting
Simple Ajax Chat is affected by cross-site scripting. The vulnerable path is reachable without authentication. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
|
See mitigation notes |
CVE3.4
NVD6.1
|