CVE-2026-73187

CriticalCVSS 9.3

Published: 18/08/2026(UTC)Translated: 18/08/2026(UTC)NVD NIST

Summary

An unauthenticated attacker can exploit SQL Injection in Sticky Chat Widget versions up to 1.4.2.

Exposure of database data, data modification, or privilege escalation.

Update the Sticky Chat Widget plugin to a version newer than 1.4.2.

Original NVD description (English source)

Unauthenticated SQL Injection in Sticky Chat Widget <= 1.4.2 versions.