Wise Chat vulnerabilities

3 known CVE vulnerabilities in Wise Chat, translated and rated.

CVE-2026-39730High
A vulnerability in the Wise Chat plugin (by Marcin) up to version 3.4.2 is due to missing authorization, allowing exploitation of incorrectly configured access control security levels.
CVE-2026-81784High
A vulnerability in the Wise Chat plugin (versions up to 3.4.2) involves deserialization of untrusted data, allowing Object Injection. This can lead to unauthorized actions in the application.
CVE-2026-66636Medium
The Wise Chat plugin by Marcin (versions up to 3.4.2) contains a Stored Cross-site Scripting (XSS) vulnerability due to improper neutralization of input during web page generation.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS