CVE-2025-68895
Authentication Bypass in AhaChat Messenger Marketing via Password Recovery
Publication date: 2026-02-20
Last updated on: 2026-02-27
Assigner: Patchstack
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| ahachat | ahachat_messenger_marketing | to 1.1 (inc) |
| ahachat | aha_chat_messenger_marketing | to 1.1 (inc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-288 | The product requires authentication, but the product has an alternate path or channel that does not require authentication. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
CVE-2025-68895 is a high-priority Broken Authentication vulnerability found in the WordPress AhaChat Messenger Marketing Plugin versions up to and including 1.1.
This vulnerability allows unauthenticated attackers to bypass normal authentication mechanisms by exploiting an alternate path or channel, enabling them to perform actions that are normally restricted to higher-privileged users.
As a result, attackers could potentially gain administrative access to the affected website.
How can this vulnerability impact me? :
This vulnerability poses a significant security risk with a CVSS severity score of 6.5.
If exploited, an attacker could gain unauthorized administrative access to your WordPress site using the AhaChat Messenger Marketing Plugin, allowing them to control or manipulate the site.
- Unauthorized changes to website content or settings.
- Potential data theft or exposure.
- Installation of malicious code or backdoors.
- Disruption of normal website operations.
No official patch is currently available, but mitigation rules from Patchstack can help block attacks targeting this vulnerability.
How does this vulnerability affect compliance with common standards and regulations (like GDPR, HIPAA)?:
I don't know
How can this vulnerability be detected on my network or system? Can you suggest some commands?
I don't know
What immediate steps should I take to mitigate this vulnerability?
This vulnerability currently has no official patch available.
Users are strongly advised to apply Patchstack’s mitigation measures immediately to protect their sites.
Patchstack has issued a mitigation rule to block attacks targeting this vulnerability until an official patch can be safely applied.