CVE-2025-14316Disclosure

LOWCVSS 7.1 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

The AhaChat Messenger Marketing WordPress plugin through 1.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

https://wpscan.com/vulnerability/7d69ebec-f940-4491-a51e-70a9e1bf8a4c/

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

2 mentions across 2 observed days
Momentum state: stable

What's happening

Technical details provided in 2 signals
Disclosure: 2 classified signals
Peaked 1d ago at 1 mentions (2026-01-30); latest day: 1
2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d

Signal classification1 categories

Disclosure

2100.0%

Referenced assets1 URL

By indicator

https://nvd.nist.gov/vuln/detail/CVE-2025-14316

Full discourse2 posts

CRAC Learning - Tech@cracbot252d
Disclosure
CVE-2025-14316 (CVSS:7.1, HIGH) is Awaiting Analysis. The AhaChat Messenger Marketing WordPress plugin through 1.1 does not sanitise and escape a parameter before outputting ..https://nvd.nist.gov/vuln/detail/CVE-2025-14316 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
The post discloses CVE-2025-14316 for the AhaChat Messenger Marketing WordPress plugin, noting a lack of input sanitisation leading to a HIGH CVSS score and awaiting further analysis.
0000039
171 followersView on X
CRAC Learning - Tech@cracbot253d
Disclosure
CVE-2025-14316 (CVSS:7.1, HIGH) is Awaiting Analysis. The AhaChat Messenger Marketing WordPress plugin through 1.1 does not sanitise and escape a parameter before outputting ..https://nvd.nist.gov/vuln/detail/CVE-2025-14316 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
The post announces CVE‑2025‑14316 affecting the AhaChat Messenger Marketing WordPress plugin, notes an input‑sanitization flaw and a CVSS‑7.1 rating, but provides no PoC, exploit code, or patch information.
0000045
171 followersView on X

Explore more

Back to dashboard