CVE-2026-92999

{
  "etk_id": "ETK-2026-2299",
  "cve_id": "CVE-2026-92999",
  "display_id": "CVE-2026-92999",
  "ghsa_id": "GHSA-q54c-xpfc-w532",
  "euvd_id": "EUVD-2026-107044",
  "status": "published",
  "anchor_state": "anchored",
  "title": "Unauthenticated contact-record disclosure in Click n Chat",
  "summary": "Click n Chat (Chat Widget Integration) for WordPress before version 1.1.3 is affected. An unauthenticated attacker can retrieve captured contact records, including names, email addresses, and phone numbers, when the vulnerable plugin and its lead-export handler are present.",
  "mitigation": "Update Click n Chat (Chat Widget Integration) to version 1.1.3 or later. Restrict public access to the affected WordPress site until the update is applied.",
  "vendor": null,
  "product": "Click n Chat (Chat Widget Integration)",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        ">= 1.0.4, < 1.1.3"
      ],
      "ecosystem": null,
      "fixed_versions": [
        "1.1.3"
      ],
      "package_name": "Click n Chat (Chat Widget Integration)",
      "purl": null
    }
  ],
  "cwes": null,
  "cvss_score": null,
  "cvss_src": null,
  "cvss_vector": null,
  "epss_score": null,
  "epss_percentile": null,
  "epss_asof": null,
  "automation": "deterministic",
  "check": true,
  "check_confidence_basis": "differential",
  "exploit": true,
  "pipeline_minutes": 16.108704933333332,
  "t0_at": "2026-10-21T06:00:26.088000+00:00",
  "signals": {
    "check": {
      "at": "2026-10-21T08:22:34.445602+00:00",
      "days": 0.09870784261574074,
      "is_lower_bound": false,
      "measured_at": "2026-10-21T06:00:26.088000+00:00",
      "url": null
    },
    "exploit": {
      "at": "2026-10-21T08:22:34.445602+00:00",
      "days": 0.09870784261574074,
      "is_lower_bound": false,
      "measured_at": "2026-10-21T06:00:26.088000+00:00",
      "url": null
    },
    "trigger_signal": {
      "at": "2026-10-21T06:00:26.088000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-10-21T06:00:26.088000+00:00",
      "url": "https://github.com/advisories/GHSA-q54c-xpfc-w532"
    }
  }
}