Chaty Pro

Chaty Pro has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2025 and 2026; all 3 are fixed as of October 2026. Their average CVSS score is 7.8, and the most serious one scores 9.8 out of 10. Severity breakdown: 1 critical and 1 high. 2026 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Scripting, behind 1 of the records (33%). Other recurring categories include SQL Injection, Unrestricted Upload Of File With Dangerous Type.

Every one of the 3 issues recorded for Chaty Pro has a vendor fix available, so running the current release closes all known holes.

3 independent researchers contributed these findings, one record each.

Strategic Overview

Avg CVSSHigh

7.8/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Chaty Pro vulnerabilities before they are exploited.

Highest severity on recordCVSS 9.8CVE-2025-26776

Chaty Pro <= 3.3.3 - Unauthenticated Arbitrary File Upload

Read the full analysis

Vulnerability Records

3 records


2026-08-17 00:00	Chaty Pro <= 3.5.8 - Unauthenticated Stored Cross-Site Scripting Chaty Pro <= 3.5.8	`CVE-2026-73360`	7.2 High	dutafi	Yes
2026-07-27 16:37	Chaty Pro <= 3.5.5 - Authenticated (Subscriber+) SQL Injection via 'widget_id' Parameter Chaty Pro <= 3.5.5	`CVE-2026-6251`	6.5 Medium	h0xilo	Yes
2025-02-14 00:00	Chaty Pro <= 3.3.3 - Unauthenticated Arbitrary File Upload Chaty Pro <= 3.3.3	`CVE-2025-26776`	9.8 Critical	luc	Yes

Showing 1–3 of 3 reports