Live Chat
Vendor:
First CVE: Jun 9, 2017 · Active for 9 years
13
Total CVEs
More Total CVEs than 91% of tracked products
3.3
Avg CVEs / Year
Higher CVE frequency than 81% of tracked products
7.0
Avg CVSS
Higher Avg CVSS than 40% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Live Chat over time
Volume of CVEsAvg CVSS Base Score
First CVE
Jun 9, 2017
9 years ago
Most Recent CVE
Mar 20, 2020
2,317 days ago
CVE Severity & Scoring
Live Chat13 CVEs
77%
23%
All CVEs352,231 CVEs
45%
40%
11%
MediumCritical
Attack Vector
Local0 (0.0%)
Network13 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low13 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None3 (23.1%)
Unknown0 (0.0%)
Required10 (76.9%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None13 (100.0%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (13 CVEs).
13 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2019-11185CRITICAL The WP Live Chat Support Pro plugin through 8.0.26 for WordPress contains an arbitrary file upload vulnerability. This results from an incomplete patch for CVE-2018-12426. Arbitrar | Jun 3, 2019 | 9.8 | 33 | NO | NO |
CVE-2019-12498CRITICAL The WP Live Chat Support plugin before 8.0.33 for WordPress accepts certain REST API calls without invoking the wplc_api_permission_check protection mechanism. | Mar 20, 2020 | 9.8 | 31 | NO | NO |
CVE-2019-14950MEDIUM The wp-live-chat-support plugin before 8.0.27 for WordPress has XSS via the GDPR page. | Aug 12, 2019 | 6.1 | 31 | NO | YES |
CVE-2018-12426CRITICAL The WP Live Chat Support Pro plugin before 8.0.07 for WordPress is vulnerable to unauthenticated Remote Code Execution due to client-side validation of allowed file types, as demon | Jul 2, 2018 | 9.8 | 31 | NO | NO |
CVE-2017-18508MEDIUM The wp-live-chat-support plugin before 7.1.03 for WordPress has XSS. | Aug 12, 2019 | 6.1 | 21 | NO | NO |
CVE-2016-10879MEDIUM The wp-live-chat-support plugin before 6.2.02 for WordPress has XSS. | Aug 12, 2019 | 6.1 | 21 | NO | NO |
CVE-2018-18460MEDIUM XSS exists in the wp-live-chat-support v8.0.15 plugin for WordPress via the modules/gdpr.php term parameter in a wp-admin/admin.php wplivechat-menu-gdpr-page request. | Oct 18, 2018 | 6.1 | 21 | NO | NO |
CVE-2018-9864MEDIUM The WP Live Chat Support plugin before 8.0.06 for WordPress has stored XSS via the Name field. | Apr 9, 2018 | 6.1 | 21 | NO | NO |
CVE-2017-2187MEDIUM Cross-site scripting vulnerability in WP Live Chat Support prior to version 7.0.07 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. | Jun 9, 2017 | 6.1 | 21 | NO | NO |
CVE-2017-18507MEDIUM The wp-live-chat-support plugin before 7.1.05 for WordPress has XSS. | Aug 13, 2019 | 6.1 | 20 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (13 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
1 CVE
7.7% of CVEs· 97th percentile
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (13 CVEs).
Media Mentions
Signals from CVEs in this product scope (13 CVEs).
Top CNAs Publishing CVEs For Live Chat
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 8.0.15 | 1 | 6.1 | 1.0% | 0 | 0 |