Flexible Chat
Monthly
Unauthenticated sensitive data exposure in the WordPress plugin Flexible Chat 1.1.0 and earlier allows network-reachable attackers to retrieve information the plugin should not expose, with a CVSS 3.1 score of 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N). The affected footprint is limited to WordPress sites running the wpdesk plugin at or below version 1.1.0; the available sources do not specify the endpoint, parameter, or exact data returned, and no public exploit was identified at time of analysis. The priority signals are modest and internally consistent, so this should not be treated as an emergency despite the High base score.
Unauthenticated sensitive data exposure in the WordPress plugin Flexible Chat 1.1.0 and earlier allows network-reachable attackers to retrieve information the plugin should not expose, with a CVSS 3.1 score of 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N). The affected footprint is limited to WordPress sites running the wpdesk plugin at or below version 1.1.0; the available sources do not specify the endpoint, parameter, or exact data returned, and no public exploit was identified at time of analysis. The priority signals are modest and internally consistent, so this should not be treated as an emergency despite the High base score.