Quick Chat <= 4.14 - SQL Injection
high
TechyTalk Quick Chat WordPress Plugin All up to the latest is affected by: SQL Injection. The impact is: Access to the database. The component is: like_escape is used in Quick-chat.php line 399. The attack vector is: Crafted ajax request.
- CVSS:
- 8.8
- Affected:
- up to 4.14
- Fix:
- No patched version reported
- Disclosed:
- Jun 12, 2018
CVE-2019-1010104 on NVD →
Quick Chat < 4.00 - SQL Injection
critical
A SQL injection issue was discovered in the Quick Chat plugin before 4.00 for WordPress.
- CVSS:
- 9.8
- Affected:
- up to 4.00
- Fixed in:
- 4.00
- Disclosed:
- Jun 18, 2012
CVE-2018-12534 on NVD →
Protect your WordPress site
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free
← Back to the vulnerability database