Wise Chat vulnerabilities

3 known CVE vulnerabilities in Wise Chat, translated and rated.

CVE-2026-39730High
A missing authorization vulnerability in Marcin Wise Chat (wise-chat) allows exploiting incorrectly configured access control security levels. This affects versions through 3.4.3.
CVE-2026-81784High
A vulnerability in the Wise Chat plugin (versions up to 3.4.2) involves deserialization of untrusted data, allowing Object Injection. This can lead to unauthorized actions in the application.
CVE-2026-66636Medium
Stored XSS vulnerability in the Wise Chat plugin by Marcin. Improper input neutralization during page generation allows persistent execution of malicious scripts.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS