WordPress plugin
Wawp Country Code & Chat Widget for WooCommerce security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 4 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical3
- High0
- Medium1
- Low0
All Wawp Country Code & Chat Widget for WooCommerce vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Critical9.8 | Unauthenticated Privilege Escalation via 'wawp_custom_fields' Parameter ≤4.8.6Update to 4.8.7 | CVE-2026-14281 | |
| Critical9.8 | Unauthenticated Authentication Bypass via 'otp_transient' Token Disclosure ≤4.8.6Update to 4.8.7 | CVE-2026-77264 | |
| Critical9.8 | Unauthenticated Privilege Escalation <3.0.18Update to 3.0.18 | CVE-2024-52475 |
- Critical9.8Unauthenticated Privilege Escalation via 'wawp_custom_fields' Parameter
≤4.8.6Update to 4.8.7
- Critical9.8Unauthenticated Authentication Bypass via 'otp_transient' Token Disclosure
≤4.8.6Update to 4.8.7
- Critical9.8Unauthenticated Privilege Escalation
<3.0.18Update to 3.0.18
Wawp Country Code & Chat Widget for WooCommerce: common questions
Does Wawp Country Code & Chat Widget for WooCommerce have known vulnerabilities?
Yes. VulnCrest Radar lists 4 known vulnerabilities in Wawp Country Code & Chat Widget for WooCommerce: 3 critical, 1 medium. None are known to affect version null.
How do I check which version of Wawp Country Code & Chat Widget for WooCommerce I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Wawp Country Code & Chat Widget for WooCommerce vulnerability?
CVE-2026-14281, published Sep 24, 2026: Automation Web Platform <= 4.8.6 - Unauthenticated Privilege Escalation via 'wawp_custom_fields' Parameter. Severity: Critical (CVSS 9.8).
Is any Wawp Country Code & Chat Widget for WooCommerce vulnerability listed in CISA KEV?
No. None of the known Wawp Country Code & Chat Widget for WooCommerce vulnerabilities is currently listed in the CISA KEV catalog.