Vulnerabilities

TI-2025-10846 CVE-2025-11829 · GHSA-g46h-r8hj-w7cg

Five9 Live Chat <= 1.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

LOW 28

The Five9 Live Chat plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'toolbar' attribute of the [five9-chat] shortcode in all versions up to, and including, 1.1.2.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00235 Published 2025-11-11 No fix listed CWE-79

TI-2018-11062 CVE-2018-15509 · GHSA-g394-jqx6-g6xv

Five9 Agent Desktop Plus 10.0.70 has Incorrect Access Control (issue 2 of 2).

MEDIUM 45

Five9 Agent Desktop Plus 10.0.70 has Incorrect Access Control (issue 2 of 2).

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01628 Published 2019-03-15 No fix listed CWE-732

TI-2018-11061 CVE-2018-15508 · GHSA-86q9-j2jh-wc2w

Five9 Agent Desktop Plus 10.0.70 has Incorrect Access Control allowing a remote attackers…

LOW 36

Five9 Agent Desktop Plus 10.0.70 has Incorrect Access Control allowing a remote attackers to cause a denial of service via opening a connection on port 8083 to a device running the Five9 SoftPhone(issue 1 of 2).

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01761 Published 2019-03-15 No fix listed CWE-732

Vulnerabilities

Filters

Five9 Live Chat <= 1.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

Five9 Agent Desktop Plus 10.0.70 has Incorrect Access Control (issue 2 of 2).

Five9 Agent Desktop Plus 10.0.70 has Incorrect Access Control allowing a remote attackers…