mxchat

Products

ProductCVEsExploitedLatest
MxChat – AI Chatbot & Content Generation for WordPress4–Oct 28, 2026

Exploited and recent CVEs

  • CVE-2026-110662 High 7.2 MxChat <= 3.2.25 - Unauthenticated Stored DOM-Based Cross-Site Scripting via 'feedback' Parameter via mxchat_save_rating 0.3%
  • CVE-2026-13005 Medium 4.4 MxChat <= 3.2.10 - Authenticated (Admin+) Stored Cross-Site Scripting via 'intro_message' Setting 0.3%
  • CVE-2025-12585 Medium 5.3 MxChat – AI Chatbot for WordPress <= 2.5.5 - Unauthenticated Information Exposure 0.3%
  • CVE-2025-10705 Medium 5.3 MxChat – AI Chatbot for WordPress <= 2.4.6 - Unauthenticated Blind Server-Side Request Forgery 0.3%