High · 8.8 CVE-2025-39542 EUVD-2025-11743GHSA-82p7-64v9-fpv5

WordPress Xelion Webchat plugin <= 9.1.0 - Privilege Escalation Vulnerability

Published Apr 17, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Jauhari Xelion Product: Xelion Webchat

Description

Incorrect Privilege Assignment vulnerability in Jauhari Xelion Xelion Webchat xelion-webchat allows Privilege Escalation.This issue affects Xelion Webchat: from n/a through <= 9.1.0.

Affected products

Vendor	Product	Affected	Fixed
Jauhari Xelion	Xelion Webchat	≤ 9.1.0	—

References

https://patchstack.com/database/Wordpress/Plugin/xelion-webchat/vulnerability/wordpress-xelion-webchat-9-1-0-privilege-escalation-vulnerability?_s_id=cve vdb-entry