Skip to content
OpenAdvisories
High · 7.1 CVE-2025-58688 EUVD-2025-30496GHSA-cmpv-f5hq-6w6j

WordPress Casengo Live Chat Support Plugin <= 2.1.4 - Cross Site Request Forgery (CSRF) Vulnerability

Published Sep 22, 2025 · Updated May 13, 2026 · Assigned by Patchstack

Description

Cross-Site Request Forgery (CSRF) vulnerability in Casengo Casengo Live Chat Support the-casengo-chat-widget allows Stored XSS.This issue affects Casengo Live Chat Support: from n/a through <= 2.1.4.

Affected products

VendorProductAffectedFixed
Casengo Casengo Live Chat Support ≤ 2.1.4 —

References