CVE-2026-73360

WordPress Chaty Pro plugin <= 3.5.8 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting (XSS) in Chaty Pro <= 3.5.8 versions.

We have discovered 4,130 live websites that are affected by CVE-2026-73360.

Run a Free Instant Scan



Affected Software

Product  Chaty Pro
Category Wordpress Plugins
Vulnerable Domains4,130 live websites (100% of Chaty Pro install base)
Vulnerable Versions
  • from 0 through 3.5.8
Vulnerable Versions Count49 versions ( 100% of all versions)


Common Weakness Enumeration

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')



Details

  • Published - Aug 18, 2026
  • Updated - Aug 18, 2026

Credits

  • dutafi | Patchstack Bug Bounty Program (finder)

Website Distribution by Country

Number of websites using CVE-2026-73360
United States894 websites


Russia321 websites
Iran289 websites
Germany248 websites
GB184 websites
Cyprus161 websites
India153 websites
Thailand148 websites
Brazil118 websites
Turkey104 websites

Website Distribution by TLD

Number of websites using CVE-2026-73360
.com1,988 websites
.ru240 websites
.com.br116 websites
.co.uk93 websites
.net87 websites
.it71 websites
.de68 websites
.org63 websites
.com.au53 websites
.es38 websites

Vulnerable Versions

Vulnerable versions are highlighted in red

Websites affected by CVE-2026-73360

Top websites that are affected by CVE-2026-73360. Please click on the "Contact us" link to get more information.
DomainCountryRankContacts
**************.com GB**,***
************.org United States**,***
********************.org United States***,***
************.com United States***,***
***********.com United States***,***
***********.com Thailand***,***
*****.nu Germany***,***
***************.it United States***,***
************.com United States***,***
*******.com United States***,***
See full domain list

FAQ

CVE-2026-73360 is Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Chaty Pro
A total of 4,130 websites have been identified as vulnerable to CVE-2026-73360, based on global website indexing conducted by WebTechSurvey.
The Chaty Pro is affected by the CVE-2026-73360 vulnerability.
Chaty Pro versions up to and including 3.5.8 are vulnerable to CVE-2026-73360.