CVE · Critical

CVE-2019-12498 — 3CX Free Live Chat, Calls & Messaging [wp-live-chat-support] < 8.0.33

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2019-12498 3CX Free Live Chat, Calls & Messaging [wp-live-chat-support] < 8.0.33 Missing Authorization Critical 9.8 < 8.0.33 8.0.33 2019-05-31

CVE-2019-12498

The WP Live Chat Support plugin in versions prior to 8.0.33 fails to enforce the wplc_api_permission_check security function on certain REST API endpoints, leaving them accessible without proper authorization checks.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.