CVE-2019-12498
The WP Live Chat Support plugin before 8.0.33 for WordPress accepts certain REST API calls without invoking the wplc_api_permission_check protection mechanism.
Source: CVE.org
CVE · Critical
CVE-2019-12498 — 3CX Free Live Chat, Calls & Messaging [wp-live-chat-support] < 8.0.33
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2019-12498 | 3CX Free Live Chat, Calls & Messaging [wp-live-chat-support] < 8.0.33 | Missing Authorization | Critical 9.8 | < 8.0.33 | 8.0.33 | 2019-05-31 | — |
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.