Skip to content
OpenAdvisories

Vendor

spoki

2 known vulnerabilities.

Products

Spoki 1 Spoki – Chat Buttons and WooCommerce Notifications 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.9
    CVE-2025-50026

    WordPress Spoki plugin <= 2.17.0 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in spoki Spoki spoki allows Stored XSS.This issue affects Spoki: from n/a through <= 2.17.0.

    spoki Spoki
  • Medium 6.4
    CVE-2024-11893

    Spoki – Chat Buttons and WooCommerce Notifications <= 2.15.15 - Authenticated (Contributor+) Stored Cross-Site Scripting

    The Spoki – Chat Buttons and WooCommerce Notifications plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'spoki_button' shortcode in all versions up to, and including, 2.15.15 due to insufficient input sanitization and output …

    spoki Spoki – Chat Buttons and WooCommerce Notifications Web / CMS