Approved changes feed: RSS · Atom
cpe:2.3:a:3cx:live_chat:*:*:*:*:*:wordpress:*:*
part: a version: * update: *
| Vendor | 3Cx (11906e06-a259-5a9c-ae5d-932194942bb7) |
|---|---|
| Product | Live Chat (81aee000-bf99-57aa-b05b-3cbfcc443c21) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | wordpress |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-9913 |
vulnerable | 2026-06-08 05:14:26.414099 |
Details available
The wp-live-chat-support plugin before 8.0.18 for WordPress has wp-admin/admin.php?page=wplivechat-menu-gdpr-page term XSS.
Published: 2019-03-21T23:01:55.000Z
Updated: 2024-08-04T22:01:55.187Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-14950 |
vulnerable | 2026-06-08 05:12:56.458619 |
Details available
The wp-live-chat-support plugin before 8.0.27 for WordPress has XSS via the GDPR page.
Published: 2019-08-12T14:50:49.000Z
Updated: 2024-08-05T00:34:52.657Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-12498 |
vulnerable | 2026-06-08 05:12:39.246219 |
Details available
The WP Live Chat Support plugin before 8.0.33 for WordPress accepts certain REST API calls without invoking the wplc_api_permission_check protection mechanism.
Published: 2020-03-20T18:37:23.000Z
Updated: 2024-08-04T23:24:38.118Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-11185 |
vulnerable | 2026-06-08 05:12:36.572879 |
Details available
The WP Live Chat Support Pro plugin through 8.0.26 for WordPress contains an arbitrary file upload vulnerability. This results from an incomplete patch for CVE-2018-12426. Arbitrary file upload is achieved by using a non-blacklisted executable file extension in conjunction with a whitelisted file extension, and prepending "magic bytes" to the payload to pass MIME checks. Specifically, an unauthenticated remote user submits a crafted file upload POST request to the REST api remote_upload endpoint. The file contains data that will fool the plugin's MIME check into classifying it as an image (which is a whitelisted file extension) and finally a trailing .phtml file extension.
Published: 2019-06-03T20:34:53.000Z
Updated: 2024-08-04T22:48:08.128Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-9864 |
vulnerable | 2026-06-08 05:12:08.339201 |
Details available
The WP Live Chat Support plugin before 8.0.06 for WordPress has stored XSS via the Name field.
Published: 2018-04-09T17:00:00.000Z
Updated: 2024-08-05T07:24:56.320Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-12426 |
vulnerable | 2026-06-08 05:10:41.551637 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-11105 |
vulnerable | 2026-06-08 05:10:37.891996 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-2187 |
vulnerable | 2026-06-08 05:09:23.862240 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-18508 |
vulnerable | 2026-06-08 05:09:11.186564 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-18507 |
vulnerable | 2026-06-08 05:09:11.186162 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-10879 |
vulnerable | 2026-06-08 05:07:25.777489 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-10386 |
vulnerable | 2026-06-08 05:05:15.656024 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.