SZB-594ee1803b
EUVD lists unauthenticated sensitive data exposure in Flexible Chat up to 1.1.0 (EUVD-2026-114312)
- Status
- Unverified: only social posts report this so far
- Kind
- Vulnerability
- Vendor
- wpdesk
- Product
- Flexible Chat
- First seen
Summary
The EU Vulnerability Database (EUVD) lists an unauthenticated Sensitive Data Exposure flaw in Flexible Chat versions 1.1.0 and earlier, scored 7.5/10 under CVSS v3.1. The item is an automated EUVD alert and does not describe exploitation.
If you use wpdesk
Check whether Flexible Chat 1.1.0 or earlier is installed
Update to a fixed release once available
Review chat logs for signs of unexpected data access
What the sources say 1
· Mastodon: “Unauthenticated Sensitive Data Exposure in Flexible Chat <= 1.1.0 versions.” Source