HOMEVULNERABILITIESCVE-2025-68895
NONE

CVE-2025-68895

CWE-288Published: February 20, 2026· Updated: Feb 20, 2026

EPSS:0.02%probability of exploitation in 30 daysPercentile:6.2th

Official Description

Authentication Bypass Using an Alternate Path or Channel vulnerability in ahachat AhaChat Messenger Marketing ahachat-messenger-marketing allows Password Recovery Exploitation.This issue affects AhaChat Messenger Marketing: from n/a through <= 1.1.

NVD Source

Technical Analysis

CVE-2025-68895 requires local access, meaning attackers must already have a foothold on the target system.

Exploitation requires some privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

Exploit & PoC Resources

NO KNOWN EXPLOITNo public exploit confirmed at this time
Exploit-DB
Offensive Security exploit database
GitHub PoC Search
Community PoC repositories
Rapid7 / Metasploit
Metasploit module search
PacketStorm
Security advisories & exploits
NVD Detail
Official NIST entry
MITRE CVE
CVE Program entry
External links open in a new tab. Always verify in a controlled environment before use.

All References (1)

→
https://patchstack.com/database/Wordpress/Plugin/ahachat-messenger-marketing/vulnerability/wordpress-ahachat-messenger-marketing-plugin-1-1-broken-authentication-vulnerability?_s_id=cve

Quick Facts

CVE IDCVE-2025-68895
SeverityNONE
WeaknessCWE-288
CISA KEVNo
EPSS (30d)0.02%
PublishedFeb 20, 2026

Related CVEs (CWE-288)

CVE-2026-53622
10.0
CVE-2026-48020
10.0
CVE-2026-48491
10.0
CVE-2026-20079
10.0
CVE-2026-10523
9.9
CVE-2026-27049
9.8

Recommended Actions

  • →Apply vendor patches immediately
  • →Monitor CVE-2025-68895 in threat intel feeds
  • →Review IDS/IPS signatures for exploitation attempts
Data sourced from NVD (NIST), CISA KEV, and EPSS (FIRST). Analysis generated by CTIWATCH.COM. CVE data is provided under the NVD usage policy.
← All Vulnerabilities·Search for CVE-2025-68895·NVD