WordPress wp-live-chat-support has 10 known advisories in the phpwarden feed. Feed 2026.10.29.1, updated 2026-10-28.
| CVE | Title | Severity | CVSS | Affected | Fixed in |
|---|---|---|---|---|---|
| CVE-2019-11185 | The WP Live Chat Support Pro plugin through 8.0.26 for WordPress contains an arbitrary file upload vulnerability. This results from an incom | critical | 9.8 | <8.0.26 | 8.0.26 |
| CVE-2019-12498 | The WP Live Chat Support plugin before 8.0.33 for WordPress accepts certain REST API calls without invoking the wplc_api_permission_check pr | critical | 9.8 | <8.0.33 | 8.0.33 |
| CVE-2018-9864 | The WP Live Chat Support plugin before 8.0.06 for WordPress has stored XSS via the Name field. | medium | 6.1 | <8.0.06 | 8.0.06 |
| CVE-2019-14950 | The wp-live-chat-support plugin before 8.0.27 for WordPress has XSS via the GDPR page. | medium | 6.1 | <8.0.27 | 8.0.27 |
| CVE-2018-11105 | There is stored cross site scripting in the wp-live-chat-support plugin before 8.0.08 for WordPress via the "name" (aka wplc_name) and "emai | medium | 6.1 | <8.0.08 | 8.0.08 |
| CVE-2018-18460 | XSS exists in the wp-live-chat-support v8.0.15 plugin for WordPress via the modules/gdpr.php term parameter in a wp-admin/admin.php wplivech | medium | 6.1 | =8.0.15 | – |
| CVE-2017-18508 | The wp-live-chat-support plugin before 7.1.03 for WordPress has XSS. | medium | 6.1 | <7.1.03 | 7.1.03 |
| CVE-2016-10879 | The wp-live-chat-support plugin before 6.2.02 for WordPress has XSS. | medium | 6.1 | <6.2.02 | 6.2.02 |
| CVE-2017-18507 | The wp-live-chat-support plugin before 7.1.05 for WordPress has XSS. | medium | 6.1 | <7.1.05 | 7.1.05 |
| CVE-2014-10386 | The wp-live-chat-support plugin before 4.1.0 for WordPress has JavaScript injections. | medium | 6.1 | <4.1.0 | 4.1.0 |
Find out in one command. phpwarden checks your WordPress install against this advisory and 20,000+ others, ranked by real-world exploitation (CISA KEV + EPSS). Free, offline, open data.
# one-time install pip install phpwarden # then phpwarden wordpress /var/www/html
Or keep it checked automatically with the GitHub Action or a nightly cron; see WordPress docs.
Install docs How findings are ranked