cleantalk
Vulnerabilities and Security Researches

WP Guppy Lite – A live chat plugin for WordPress, CVE-2025-49910

CVE, Research URL

CVE-2025-49910

Published on
Oct 22, 2025
Research Description
Missing Authorization vulnerability in AmentoTech Private Limited WPGuppy wpguppy-lite allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WPGuppy: from n/a through <= 1.1.4.
Affected versions
max 1.1.4.
Status
vulnerable