Medium · 5.4 CVE-2023-49821 EUVD-2023-53729GHSA-2fgw-ch33-hpgq

WordPress LiveChat Plugin <= 4.5.15 is vulnerable to Cross Site Request Forgery (CSRF)

Published Dec 18, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: LiveChat Product: LiveChat – WP live chat plugin for WordPress Category: Web / CMS

Description

Cross-Site Request Forgery (CSRF) vulnerability in LiveChat LiveChat – WP live chat plugin for WordPress.This issue affects LiveChat – WP live chat plugin for WordPress: from n/a through 4.5.15.

Affected products

Vendor	Product	Affected	Fixed
LiveChat	LiveChat – WP live chat plugin for WordPress	≤ 4.5.15	—

References

https://patchstack.com/database/vulnerability/wp-live-chat-software-for-wordpress/wordpress-livechat-plugin-4-5-15-cross-site-request-forgery-csrf-vulnerability?_s_id=cve vdb-entry