PT-2026-21119 · Ahachat · Ahachat Messenger Marketing

CVE-2025-68895 · Publicado 2026-02-20 · Atualizado 2026-02-22

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

Name of the Vulnerable Software and Affected Versions AhaChat Messenger Marketing versions prior to 1.2

Description An authentication bypass issue exists in AhaChat Messenger Marketing that allows for password recovery exploitation through an alternate path or channel.

Recommendations Update to version 1.2 or later.

Correção

Authentication Bypass Using an Alternate Path or Channel

Enumeração de Fraquezas

CWE-288

Identificadores relacionados

CVE-2025-68895

Produtos afetados

Ahachat Messenger Marketing

Referências · 3

• https://twitter.com/CVEnew/status/2025425526803103810 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2025-68895 · Nota de Segurança
• https://patchstack.com/database/Wordpress/Plugin/ahachat-messenger-marketing/vulnerability/wordpress-ahachat-messenger-marketing-plugin-1-1-broken-authentication-vulnerability?_s_id=cve · Nota