Really Simple Security logo

Log out
Get PRO

Latest

Input validation vulnerability in MxChat – AI Chatbot for WordPress 2.4.6

  • Severity: medium-risk
  • Status: Fixed
  • Publication: October 22, 2025

The MxChat plugin for WordPress has a security vulnerability in all versions up to 2.4.6. This is because it does not properly check the URLs provided by users in the PDF processing feature. This means that attackers can make the WordPress server send requests to any website without being authenticated.

Detected in:

MxChat – AI Chatbot & Content Generation for WordPress fixed vulnerable versions:
MxChat – AI Chatbot for WordPress fixed vulnerable versions: >= * <= 2.4.6
MxChat – AI Chatbot for WordPress with ChatGPT, Claude & Gemini fixed vulnerable versions:

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.