← Back

Wp Live Chat Shoutbox

wp_live_chat_shoutbox

Vendor: Wp Live Chat Shoutbox Project • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2023-1020
1Wp Live Chat Shoutbox Project
1Wp Live Chat Shoutbox
Jun 17, 2026
Apr 24, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
The Steveas WP Live Chat Shoutbox WordPress plugin through 1.4.2 does not sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injecti...Show more
The Steveas WP Live Chat Shoutbox WordPress plugin through 1.4.2 does not sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection.Show less
CVE-2023-0899
1Wp Live Chat Shoutbox Project
1Wp Live Chat Shoutbox
Jun 17, 2026
Apr 24, 2023
N/A· v4
6.1 MEDIUM· v3
N/A· v2
The Steveas WP Live Chat Shoutbox WordPress plugin through 1.4.2 does not sanitise and escape a parameter before outputting it back in the Shoutbox, leading to Stored Cross-Site Scripting which could be used against high...Show more
The Steveas WP Live Chat Shoutbox WordPress plugin through 1.4.2 does not sanitise and escape a parameter before outputting it back in the Shoutbox, leading to Stored Cross-Site Scripting which could be used against high privilege users such as admins.Show less