CVE-2026-81784: WordPress Wise Chat plugin <= 3.4.2 - PHP Object Injection vulnerability
Published Sep 10, 2026
·Updated
Deserialization of Untrusted Data vulnerability in Marcin Wise Chat wise-chat allows Object Injection.This issue affects Wise Chat: from n/a through 3.4.2.
Affected Software
1 affected component
Marcin Wise Chat<=3.4.2
Event History
Sep 10, 2026
CVE Published
via MITRE·02:23 PM
Data Sourced
via MITRE·02:23 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·03:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Does exploitation require a victim to take any action?
No. The CVSS vector indicates no user interaction is required.
2
What impact is reflected in the severity assessment?
The CVSS assessment rates confidentiality, integrity, and availability impact as high. Exploitation is rated high complexity, despite being network-accessible.