plugin

Watcheezy Vulnerabilities

1 known security issue reported for the Watcheezy WordPress plugin. Most recent disclosed May 5, 2021.

1 medium

Running Watcheezy on your site? Check whether your installed version is affected.

Watcheezy Live chat plugin for WordPress <= 2.0 - Stored Cross-Site Scripting

medium

The Target First WordPress Plugin v2.0, also previously known as Watcheezy, suffers from a critical unauthenticated stored XSS vulnerability. An attacker could change the licence key value through a POST on any URL with the 'weeWzKey' parameter that will be save as the 'weeID' option and is not sanitized.

CVSS:: 6.1
Affected:: up to 2.0
Fixed in:: 3.0
Disclosed:: May 5, 2021

CVE-2021-24305 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database