Known Vulnerabilities for Whatsapp-mcp by Verygoodplugins
Listed below are 10 of the newest known vulnerabilities associated with "Whatsapp-mcp" by "Verygoodplugins".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-100556 json | OpenClaw (npm package openclaw) versions >= 2026.5.2 and < 2026.8.1 contain an incorrect authorization vulnerability in Whats... | Not Provided | 2026-09-26 | 2026-09-30 |
| CVE-2026-100532 json | @openclaw/whatsapp (npm) before 2026.8.1 exposes the WhatsApp login tool through the generic channel-tool path without preser... | Not Provided | 2026-09-26 | 2026-09-30 |
| CVE-2026-91997 json | evolution-api through 2.3.7 contains an incorrect array comparison in the metricsIPWhitelist middleware that always evaluates... | Not Provided | 2026-09-15 | 2026-09-24 |
| CVE-2026-91161 json | OpenWA is a free, open source, self-hosted WhatsApp API gateway. Prior to 0.23.5, the GET /api/sessions/{sessionId}/groups/{g... | Not Provided | 2026-09-24 | 2026-09-24 |
| CVE-2026-91160 json | OpenWA is a free, open source, self-hosted WhatsApp API gateway. Prior to 0.23.5, the /events WebSocket gateway delivers the ... | Not Provided | 2026-09-24 | 2026-09-24 |
| CVE-2026-77240 json | WACRM is a self-hostable CRM template for WhatsApp. In version 0.7.0 and earlier, the profiles_update row-level security poli... | Not Provided | 2026-09-18 | 2026-09-23 |
| CVE-2026-77239 json | WACRM is a self-hostable CRM template for WhatsApp. In version 0.7.0 and earlier, WACRM flow and automation write routes auth... | Not Provided | 2026-09-18 | 2026-09-18 |
| CVE-2026-77177 json | Open GenAI Stack (aka ogx-ai) 2026-06-11, as used in the Meta AI backend for WhatsApp and other products, allows code executi... | Not Provided | 2026-09-29 | 2026-09-29 |
| CVE-2026-67595 json | VaahCMS versions 2.0.0 through 2.3.4 contain a malicious obfuscated JavaScript payload embedded in the Blade template respons... | Not Provided | 2026-07-29 | 2026-07-30 |
| CVE-2026-67530 json | WACRM is a self-hostable CRM template for WhatsApp. In 0.7.0 and earlier, the automation send_webhook action in src/lib/autom... | Not Provided | 2026-07-30 | 2026-07-31 |