mxchat
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| MxChat – AI Chatbot & Content Generation for WordPress | 4 | – | Oct 28, 2026 |
Exploited and recent CVEs
- CVE-2026-110662 MxChat <= 3.2.25 - Unauthenticated Stored DOM-Based Cross-Site Scripting via 'feedback' Parameter via mxchat_save_rating 0.3%
- CVE-2026-13005 MxChat <= 3.2.10 - Authenticated (Admin+) Stored Cross-Site Scripting via 'intro_message' Setting 0.3%
- CVE-2025-12585 MxChat – AI Chatbot for WordPress <= 2.5.5 - Unauthenticated Information Exposure 0.3%
- CVE-2025-10705 MxChat – AI Chatbot for WordPress <= 2.4.6 - Unauthenticated Blind Server-Side Request Forgery 0.3%