CVE-2022-2039

🗓️ 18 Jul 2022 16:12:50Reported by WordfenceType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 59 Views

The Free Live Chat Support plugin for WordPress is vulnerable to Cross-Site Request Forger

Reporter	Title	Published	Views	Family All 11
ATTACKERKB	CVE-2022-2039	18 Jul 202217:15	–	attackerkb
Circl	CVE-2022-2039	18 Jul 202220:39	–	circl
CNNVD	WordPress plugin Free Live Chat Support 跨站请求伪造漏洞	18 Jul 202200:00	–	cnnvd
Cvelist	CVE-2022-2039 Free Live Chat Support <= 1.0.11 - Cross-Site Request Forgery to Cross-Site Scripting	18 Jul 202216:12	–	cvelist
EUVD	EUVD-2022-34342	3 Oct 202520:07	–	euvd
NVD	CVE-2022-2039	18 Jul 202217:15	–	nvd
OSV	CVE-2022-2039	18 Jul 202217:15	–	osv
Prion	Cross site request forgery (csrf)	18 Jul 202217:15	–	prion
Positive Technologies	PT-2022-14615 · WordPress · Free Live Chat Support	18 Jul 202200:00	–	ptsecurity
RedhatCVE	CVE-2022-2039	5 Feb 202521:16	–	redhatcve

NVD

Vulners

Node

livesupporti free_live_chat_supportRange≤1.0.11wordpress

[
  {
    "vendor": "livesupporti",
    "product": "Free Live Chat Support",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "1.0.11",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
plugins	www.plugins.trac.wordpress.org/changeset
plugins	www.plugins.trac.wordpress.org/browser/livesupporti/trunk/livesupporti.php
wordpress	www.wordpress.org/plugins/livesupporti/
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/dfa3efa2-c542-44b9-8039-13e6eac75101
wordfence	www.wordfence.com/vulnerability-advisories/

08 Apr 2026 19:17Current

8.4High risk

Vulners AI Score8.4

CVSS 3.18.8

EPSS0.00355

CWE-352