SQL Injection Vulnerability in WP Dashboard Chat Plugin for WordPress

CVE-2025-10660

What is CVE-2025-10660?

The WP Dashboard Chat plugin for WordPress has a vulnerability that allows authenticated users with Contributor-level access and higher to exploit insufficient input validation. By sending specially crafted requests through the 'id' parameter, attackers can manipulate existing SQL queries, leading to unauthorized access to sensitive information stored in the database. This issue is present in all versions of the plugin up to and including 1.0.3, making it imperative for users to update to secure versions and implement proper input sanitization practices.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References