Skip to content
OpenAdvisories
Medium · 6.5 CVE-2025-22292 EUVD-2025-2692GHSA-8phh-ch6h-hm63

WordPress Powerful Auto Chat plugin <= 1.9.8 - Cross Site Scripting (XSS) vulnerability

Published Feb 3, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Felipe Peixoto Powerful Auto Chat powers-triggers-of-woo-to-chat allows Stored XSS.This issue affects Powerful Auto Chat: from n/a through <= 1.9.8.

Affected products

VendorProductAffectedFixed
Felipe Peixoto Powerful Auto Chat ≤ 1.9.8 —

References