Login Request a demo
LC
Product
Live Chat
by 3cx · last CVE Mar 20, 2020
13
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities13In the news0Timeline
Severity mix
Critical 3High 0Medium 10Low 0
Severity
All severities13Critical3High0Medium10Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Live Chat to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2019-12498
9.8
2%
Mar 20
The WP Live Chat Support plugin before 8.0.33 for WordPress accepts certain REST API calls without invoking the wplc_api_permission_check protection mechanism
Affected: before 8.0.33
CVE-2019-11185
9.8
4%
Jun 3
The WP Live Chat Support Pro plugin through 8.0.26 for WordPress contains an arbitrary file upload vulnerability
Affected: before 8.0.26
CVE-2018-12426
9.8
5%
Jul 2
The WP Live Chat Support Pro plugin before 8.0.07 for WordPress is vulnerable to unauthenticated Remote Code Execution due to client-side validation of allowed file types, as…
Affected: before 8.0.07
CVE-2014-10386
6.1
1%
Aug 22
The wp-live-chat-support plugin before 4.1.0 for WordPress has JavaScript injections
Affected: before 4.1.0
CVE-2017-18507
6.1
1%
Aug 13
The wp-live-chat-support plugin before 7.1.05 for WordPress has XSS
Affected: before 7.1.05
CVE-2019-14950
6.1
1%
Aug 12
The wp-live-chat-support plugin before 8.0.27 for WordPress has XSS via the GDPR page
Affected: before 8.0.27
CVE-2017-18508
6.1
1%
Aug 12
The wp-live-chat-support plugin before 7.1.03 for WordPress has XSS
Affected: before 7.1.03
CVE-2016-10879
6.1
1%
Aug 12
The wp-live-chat-support plugin before 6.2.02 for WordPress has XSS
Affected: before 6.2.02
CVE-2019-9913
6.1
1%
Mar 21
The wp-live-chat-support plugin before 8.0.18 for WordPress has wp-admin/admin.php?page=wplivechat-menu-gdpr-page term XSS
Affected: before 8.0.18
CVE-2018-18460
6.1
1%
Oct 18
XSS exists in the wp-live-chat-support v8.0.15 plugin for WordPress via the modules/gdpr.php term parameter in a wp-admin/admin.php wplivechat-menu-gdpr-page request
Affected: 8.0.15
CVE-2018-11105
6.1
1%
May 15
There is stored cross site scripting in the wp-live-chat-support plugin before 8.0.08 for WordPress via the "name" (aka wplc_name) and "email" (aka wplc_email) input fields to…
Affected: before 8.0.08
CVE-2018-9864
6.1
1%
Apr 9
The WP Live Chat Support plugin before 8.0.06 for WordPress has stored XSS via the Name field
Affected: before 8.0.06
CVE-2017-2187
6.1
1%
Jun 9
Cross-site scripting vulnerability in WP Live Chat Support prior to version 7.0.07 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors
Affected: through 7.0.06
Showing 13