marcinlawrowski
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Wise Chat | 2 | – | Jun 17, 2025 |
| Wise Analytics | 1 | – | Jan 24, 2026 |
Exploited and recent CVEs
- CVE-2025-14609 Wise Analytics <= 1.1.9 - Missing Authorization to Unauthenticated Arbitrary Analytics Database Disclosure via 'name' Parameter 0.3%
- CVE-2025-3774 Wise Chat <= 3.3.4 - Unauthenticated Stored Cross-Site Scripting via X-Forwarded-For Header 0.3%
- CVE-2024-13613 Wise Chat <= 3.3.3 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory 0.5%