๐Ÿ” CVE Alert

CVE-2026-92997

UNKNOWN 0.0

Click n Chat < 1.1.3 - Unauthenticated SQLi via 'datacolumn' Parameter

CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th

The Click n Chat (Chat Widget Integration) WordPress plugin before 1.1.3 does not properly validate a parameter before using it as a column identifier in a SQL query, allowing unauthenticated attackers to perform SQL injection attacks.

Vendor unknown
Product click n chat (chat widget integration)
Published Oct 21, 2026
Stay Ahead of the Next One

Get instant alerts for unknown click n chat (chat widget integration)

Be the first to know when new unknown vulnerabilities affecting unknown click n chat (chat widget integration) are published โ€” delivered to Slack, Telegram or Discord.

Get Free Alerts โ†’ Free ยท No credit card ยท 60 sec setup

Affected Versions

Unknown / Click n Chat (Chat Widget Integration)
0 < 1.1.3

References

NVD โ†— CVE.org โ†— EPSS Data โ†—
wpscan.com: https://wpscan.com/vulnerability/2b7edbc9-9562-46a7-95f6-fa4336e5c4c3/

Credits

Ryan Fabella WPScan