LiveChat < 4.5.16 - Cross-Site Request Forgery

2023-12-0900:00:00

wpscan.com

livechat

cross-site request forgery

csrf checks

attackers

logged in users

unwanted actions

csrf attacks

plugin

AI Score

8.6

Confidence

High

EPSS

0.001

Percentile

24.1%

JSON

Description The plugin does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks

References

patchstack.com/database/vulnerability/wp-live-chat-software-for-wordpress/wordpress-livechat-plugin-4-5-15-cross-site-request-forgery-csrf-vulnerability