Black Friday60% off BLACKFRIDAY2026
Platform
PlansPartners
Resources
ToolsBlogDocs
Sign Up →
high·Product Based Web Vulnerabilities·Updated Nov 11, 2026

Click n Chat < 1.1.3 - Unauthenticated SQL Injection

Est. Time~10 seconds
Scan TypeGroup Scan
Targetsdomain, subdomain, ipv4
CostFree
20
Times Used
continuous scan runs
10
Continuously Checked
assets under CS
0
Vulnerabilities Found
confirmed findings
References
8.6
CVSShigh
Exploitable remotely over the internet · no authentication required.
Description

The Click n Chat (Chat Widget Integration) WordPress plugin before 1.1.3 does not sanitise sort parameters before using them in a SQL ORDER BY clause, allowing unauthenticated attackers to perform SQL injection attacks.

Attack Vector
Network
Privileges Req.
None
User Interaction
None
Affected
Click n Chat (Chat Widget Integration)
AFFECTED< 1.1.3→SAFE ✓≥ 1.1.3
Updated Nov 15, 2026View on NVD →

Check your infrastructure.
Right now.

12,000+ scanners. Free to start. No credit card required.

Browse All Tools