PLUGIN SECURITY

Is Tawk.To Live Chat safe?

(OFFICIAL tawk.to plugin) Instantly chat with visitors on your website with the free tawk.to chat widget. Website: http://tawk.to

What this plugin does

  • Slug: tawkto-live-chat
  • Author: tawkto
  • 100000+ active installs
  • 92/100 rating (142 reviews on wordpress.org)
  • 4741687 all-time downloads
  • On WordPress.org since 2013-11-01

AI chatchat widgetfree live chattawktawk.to

Maintenance status

  • Latest known version: 0.9.3
  • Last updated: 2026-01-14 9:32am GMT
  • Tested up to WordPress: 6.9.7
  • Requires PHP: 5.6+

Known vulnerabilities

1 known CVE on file for Tawk.To Live Chat. Reported between 2021 and 2021.

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2021-24914 Tawk.To Live Chat [tawkto-live-chat] < 0.6.0 Cross-Site Request Forgery (CSRF) High 8.0 < 0.6.0 0.6.0 2021-11-08 ✓ fixed in latest

How to fix it

Keep Tawk.To Live Chat updated — 0.9.3 is the latest version on wordpress.org, and each CVE above lists the exact release that fixed it ("Fixed in").

This is the plugin's full known vulnerability history, not a scan of any specific installation — run a free scan of your own site to check your exact installed version.

Safer / more established alternatives

Check your own WordPress site

Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.