Skip to content
OpenAdvisories
High · 7.5 CVE-2024-44018 EUVD-2024-40800GHSA-vhv5-xm77-fph6

WordPress Instant Chat WP plugin <= 1.0.5 - Local File Inclusion vulnerability

Published Oct 5, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in istmoplugins Instant Chat Floating Button for WordPress Websites instant-chat-wp allows PHP Local File Inclusion.This issue affects Instant Chat Floating Button for WordPress Websites: from n/a through <= 1.0.5.

Affected products

VendorProductAffectedFixed
istmoplugins Instant Chat Floating Button for WordPress Websites ≤ 1.0.5 —

References