Medium · 5.4 CVE-2022-27850 EUVD-2022-32338GHSA-q5jr-9g29-g3mv

WordPress Simple Ajax Chat plugin <= 20220115 - Multiple Cross-Site Request Forgery (CSRF) vulnerability

Published Apr 15, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Jeff Starr Product: Simple Ajax Chat (WordPress plugin) Category: Web / CMS

Description

Cross-Site Request Forgery (CSRF) in Simple Ajax Chat (WordPress plugin) <= 20220115 allows an attacker to clear the chat log or delete a chat message.

Affected products

Vendor	Product	Affected	Fixed
Jeff Starr	Simple Ajax Chat (WordPress plugin)	<= 20220115 – ≤ 20220115	—

References

https://wordpress.org/plugins/simple-ajax-chat/#developers
https://patchstack.com/database/vulnerability/simple-ajax-chat/wordpress-simple-ajax-chat-plugin-20220115-multiple-cross-site-request-forgery-csrf-vulnerability