MxChat Vulnerability

MxChat is an AI Chatbot for WordPress plugin used by some WordPress websites to enhance user experience. This vulnerability allows attackers to extract sensitive information from the chat system, potentially leading to unauthorized access to conversation data.

Specific version info not stated in the advisory.

To fix this vulnerability:

1. Update your MxChat plugin to version 2.5.6 or later.
   • You can download the latest version from the official WordPress Plugin Directory: https://wordpress.org/plugins/mxchat/
2. If you cannot update immediately, apply these immediate mitigations:
   • Restrict network access to your MxChat instance (firewall it from the public internet).
   • Monitor for suspicious activity related to file uploads and chat sessions.

• plugins.trac.wordpress.org
• plugins.trac.wordpress.org
• www.wordfence.com