Vulnerabilities

TI-2019-09333 CVE-2019-12498 · GHSA-6mgg-8wqh-hw3h

The WP Live Chat Support plugin before 8.0.33 for WordPress accepts certain REST API…

MEDIUM 47

The WP Live Chat Support plugin before 8.0.33 for WordPress accepts certain REST API calls without invoking the wplc_api_permission_check protection mechanism.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02711 Published 2020-03-20 No fix listed CWE-862

TI-2014-08248 CVE-2014-10386 · GHSA-6mmm-qq9m-4q4w

The wp-live-chat-support plugin before 4.1.0 for WordPress has JavaScript injections.

LOW 29

The wp-live-chat-support plugin before 4.1.0 for WordPress has JavaScript injections.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00913 Published 2019-08-22 No fix listed CWE-74

TI-2017-13680 CVE-2017-18507 · GHSA-23v4-p97p-cxrg

The wp-live-chat-support plugin before 7.1.05 for WordPress has XSS.

LOW 29

The wp-live-chat-support plugin before 7.1.05 for WordPress has XSS.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00915 Published 2019-08-13 No fix listed CWE-79

TI-2019-11148 CVE-2019-14950 · GHSA-wrxf-339r-r7hx

The wp-live-chat-support plugin before 8.0.27 for WordPress has XSS via the GDPR page.

LOW 30

The wp-live-chat-support plugin before 8.0.27 for WordPress has XSS via the GDPR page.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01211 Published 2019-08-12 No fix listed CWE-79

TI-2017-13681 CVE-2017-18508 · GHSA-qhqm-r992-4fg3

The wp-live-chat-support plugin before 7.1.03 for WordPress has XSS.

LOW 29

The wp-live-chat-support plugin before 7.1.03 for WordPress has XSS.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00933 Published 2019-08-12 No fix listed CWE-79

TI-2016-08917 CVE-2016-10879 · GHSA-xj35-wqmm-2cgp

The wp-live-chat-support plugin before 6.2.02 for WordPress has XSS.

LOW 29

The wp-live-chat-support plugin before 6.2.02 for WordPress has XSS.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.0093 Published 2019-08-12 No fix listed CWE-79

TI-2019-08369 CVE-2019-11185 · GHSA-wfph-5jh4-c99x

The WP Live Chat Support Pro plugin through 8.0.26 for WordPress contains an arbitrary…

MEDIUM 49

The WP Live Chat Support Pro plugin through 8.0.26 for WordPress contains an arbitrary file upload vulnerability.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.04349 Published 2019-06-03 No fix listed CWE-434

TI-2019-07285 CVE-2019-9913 · GHSA-j4h9-5mqx-7rp7

The wp-live-chat-support plugin before 8.0.18 for WordPress has…

LOW 30

The wp-live-chat-support plugin before 8.0.18 for WordPress has wp-admin/admin.php?page=wplivechat-menu-gdpr-page term XSS.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01377 Published 2019-03-21 No fix listed CWE-79

TI-2018-13056 CVE-2018-18460 · GHSA-7pgp-wp79-7v7r

XSS exists in the wp-live-chat-support v8.0.15 plugin for WordPress via the…

LOW 29

XSS exists in the wp-live-chat-support v8.0.15 plugin for WordPress via the modules/gdpr.php term parameter in a wp-admin/admin.php wplivechat-menu-gdpr-page request.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01022 Published 2018-10-18 No fix listed CWE-79

TI-2018-08921 CVE-2018-12426 · GHSA-rm79-mfx6-crmj

The WP Live Chat Support Pro plugin before 8.0.07 for WordPress is vulnerable to…

MEDIUM 50

The WP Live Chat Support Pro plugin before 8.0.07 for WordPress is vulnerable to unauthenticated Remote Code Execution due to client-side validation of allowed file types, as demonstrated by a v1/remote_upload request wi…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.04984 Published 2018-07-02 No fix listed CWE-434

TI-2018-07887 CVE-2018-11105 · GHSA-8qw3-4qpj-p88r

There is stored cross site scripting in the wp-live-chat-support plugin before 8.0.08 for…

LOW 29

There is stored cross site scripting in the wp-live-chat-support plugin before 8.0.08 for WordPress via the "name" (aka wplc_name) and "email" (aka wplc_email) input fields to wp-json/wp_live_chat_support/v1/start_chat w…

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.0106 Published 2018-05-15 No fix listed CWE-79

TI-2018-07025 CVE-2018-9864 · GHSA-542f-58pj-42gq

The WP Live Chat Support plugin before 8.0.06 for WordPress has stored XSS via the Name field.

LOW 30

The WP Live Chat Support plugin before 8.0.06 for WordPress has stored XSS via the Name field.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01324 Published 2018-04-09 No fix listed CWE-79

TI-2017-01487 CVE-2017-2187 · GHSA-cm6c-3gpv-26fp

Cross-site scripting in Code Cabin Inc WP Live Chat Support

LOW 30

Cross-site scripting vulnerability in WP Live Chat Support prior to version 7.0.07 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01293 Published 2017-06-09 No fix listed CWE-79

Vulnerabilities

Filters