CVE-2022-27849
MEDIUM NUCLEISimple Ajax Chat <= 20220115 - Sensitive Information Disclosure via sac-export.csv
Title source: llmExploitation Summary
CVE-2022-27849 has a Nuclei detection template available — see the Nuclei card below for the Shodan/FOFA recon queries.
Description
Sensitive Information Disclosure (sac-export.csv) in Simple Ajax Chat (WordPress plugin) <= 20220115
Nuclei Templates (1)
WordPress Simple Ajax Chat <20220116 - Sensitive Information Disclosure vulnerability
HIGHby random-robbie
References (2)
Core 2
Core References
Release Notes, Third Party Advisory x_refsource_confirm
https://wordpress.org/plugins/simple-ajax-chat/#developers
Third Party Advisory x_refsource_confirm
https://patchstack.com/database/vulnerability/simple-ajax-chat/wordpress-simple-ajax-chat-plugin-20220115-sensitive-information-disclosure-vulnerability
Scores
CVSS v3
5.3
EPSS
0.0441
EPSS Percentile
90.1%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
yes
Technical Impact
partial
Details
CWE
CWE-200
Status
published
Products (2)
Jeff Starr/Simple Ajax Chat (WordPress plugin)
<= 20220115 - 20220115
plugin-planet/simple_ajax_chat
< 20220115
Published
Apr 15, 2022
Tracked Since
Feb 18, 2026