Skip to content
OpenAdvisories

Vendor

Jauhari Xelion

2 known vulnerabilities.

Products

Xelion Webchat 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2025-3058

    Xelion Webchat <= 9.1.0 - Authenticated (Subscriber+) Arbitrary Options Update

    The Xelion Webchat plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the xwc_save_settings() function in all versions up to, and including, 9.1.0. This makes it p…

    Jauhari Xelion Xelion Webchat Web / CMS
  • High 8.8
    CVE-2025-39542

    WordPress Xelion Webchat plugin <= 9.1.0 - Privilege Escalation Vulnerability

    Incorrect Privilege Assignment vulnerability in Jauhari Xelion Xelion Webchat xelion-webchat allows Privilege Escalation.This issue affects Xelion Webchat: from n/a through <= 9.1.0.

    Jauhari Xelion Xelion Webchat