CVE-2026-73187

The Sticky Chat Widget versions up to 1.4.2 are vulnerable to an unauthenticated SQL injection, allowing attackers to execute arbitrary SQL queries on the database. This critical vulnerability can lead to unauthorized access to sensitive data, data manipulation, or even complete system compromise. Organizations using this widget should prioritize immediate remediation to mitigate potential exploitation risks.