Known vulnerabilities in WP Live Chat Support

Software CPE: cpe:2.3:a:wp-livechat:wp-live-chat-support:*:*:*:*:*:wordpress:*:*
Total vulnerabilities: 11
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting WP Live Chat Support WP Live Chat Support is affected by 11 known vulnerabilities: 3 high, 3 medium, 5 low Critical High Medium Low

Vulnerabilities (11)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU20674 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
6.2.04 02.09.2019 SB2016080105
#VU20609 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
7.1.05 02.09.2019 SB2017073002
#VU20565 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-11105
CWE-79 Low
No
No
8.0.08 02.09.2019 SB2018051523
#VU20566 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
8.0.08 02.09.2019 SB2018051523
#VU20518 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
8.0.18 02.09.2019 SB2019020510
#VU19851 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CWE-89 High
No
No
4.4.0 02.08.2019 SB2015070602
#VU18802 - Unrestricted Upload of File with Dangerous Type
CVE-2019-11185
CWE-434 High
No
No
8.0.32 14.06.2019 SB2019050704
#VU18518 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-2187
CWE-79 Medium
No
No
7.0.07 17.05.2019 SB2017060908
SB2017060107
#VU18517 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-9864
CWE-79 Medium
No
No
8.0.06 17.05.2019 SB2018040909
SB2018040910
#VU18516 - Unrestricted Upload of File with Dangerous Type
CVE-2018-12426
CWE-434 High
No
No
8.0.07 17.05.2019 SB2018070211
SB2019031109
#VU18515 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Medium
No
No
8.0.27 17.05.2019 SB2019051701