Known vulnerabilities in LiveChat – Live Chat Plugin for WP Websites

Best live chat and help desk plugin for WordPress websites. Add the LiveChat widget to engage visitors and provide real‑time customer support! 🚀

2Reported vulnerabilities

8.8Highest CVSS score

5.0.12Latest version

10,000+Active installs

What to do now

Update LiveChat – Live Chat Plugin for WP Websites to 4.5.16 or later. 2 of these have a fixed version available. Updating resolves them.

Plugin last updated: May 25, 2026 / Tested up to WordPress: 6.9.7 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVE	Severity	Exploit probability next 30 days	Affected versions	Fixed in	Published
CVE-2023-49821	High 8.8	0.3%	4.5.15 and earlier	`4.5.16`	December 18, 2023
WF-68ddc0a1-2f5a-446d-9d83-b6028d012956	Medium 6.4	—	3.7.3 and earlier	`3.7.4`	June 26, 2019

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.