CVE-2026-92998

{
  "etk_id": "ETK-2026-2304",
  "cve_id": "CVE-2026-92998",
  "display_id": "CVE-2026-92998",
  "ghsa_id": "GHSA-xhvc-grwf-wxq3",
  "euvd_id": "EUVD-2026-107043",
  "status": "published",
  "anchor_state": "anchored",
  "title": "Unauthenticated SQL injection in Click n Chat",
  "summary": "Click n Chat for WordPress versions before 1.1.3 are affected by an SQL injection issue in handling of sorting input. An unauthenticated remote attacker may manipulate database queries if they can reach the affected functionality.",
  "mitigation": "Update Click n Chat to version 1.1.3 or later. If upgrading cannot be completed immediately, deactivate the plugin to remove exposure.",
  "vendor": null,
  "product": "Click n Chat (Chat Widget Integration)",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        ">= 1.0.4, < 1.1.3"
      ],
      "ecosystem": null,
      "fixed_versions": [
        "1.1.3"
      ],
      "package_name": "Click n Chat (Chat Widget Integration)",
      "purl": null
    }
  ],
  "cwes": null,
  "cvss_score": null,
  "cvss_src": null,
  "cvss_vector": null,
  "epss_score": null,
  "epss_percentile": null,
  "epss_asof": null,
  "automation": "deterministic",
  "check": false,
  "check_confidence_basis": null,
  "exploit": false,
  "pipeline_minutes": 30.31279365,
  "t0_at": "2026-10-21T06:00:25.917000+00:00",
  "signals": {
    "trigger_signal": {
      "at": "2026-10-21T06:00:25.917000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-10-21T06:00:25.917000+00:00",
      "url": "https://github.com/advisories/GHSA-xhvc-grwf-wxq3"
    }
  }
}