https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-21T13:44:04.286435+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-92998 CVE-2026-92998 — Click n Chat 1.0.4 - 1.1.2 - Unauthenticated SQLi via 'sort_by'/'sort_order' Parameters 2026-10-21T13:44:06.136736+00:00

Affected: Unknown Click n Chat (Chat Widget Integration)

The Click n Chat (Chat Widget Integration) WordPress plugin before 1.1.3 does not sanitise sort parameters before using them in a SQL ORDER BY clause, allowing unauthenticated attackers to perform SQL injection attacks.