CVE-2025-64240

CVE-2025-64240 concerns the WordPress Freshchat plugin (versions n/a through 2.3.4) and is a CSRF vulnerability. The issue arises in freshchat’s handling of requests, potentially allowing an attacker to spoof a request and perform actions on behalf of an authenticated user. Affected component: Wo...

WordPress Freshchat plugin <= 2.3.4 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Nabil Irawan in WordPress Plugin Freshchat versions = 2.3.4...