collectchat
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Chatbot for WordPress by Collect.chat ⚡️ | 1 | – | Feb 14, 2026 |
| Collect.chat Chatbot ⚡️ | 1 | – | Jan 11, 2024 |
| collectchat | 1 | – | Jun 17, 2026 |
Exploited and recent CVEs
- CVE-2026-40765 WordPress collectchat plugin <= 2.4.9 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2026-0736 Chatbot for WordPress by Collect.chat ⚡️ <= 2.4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Meta Field 0.3%
- CVE-2023-5691 The Chatbot for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in version 2.3.9 due to insufficient input sanitization and output escaping. This makes i 0.3%