WordPress Plugin Vulnerabilities

WP Live Chat Support Pro - File Upload Bypass

Description

Note: The free and pro version have been merged in WP Live Chat Support 8.0.27

Affects Plugins

Plugin icon
wp-live-chat-support-pro
Fixed in 8.0.32

References

CVE
CVE-2019-11185
URL
https://blog.alertlogic.com/alert-logic-uncovers-new-vulnerability-in-wordpress-wp-live-chat-cve-2019-11185/
URL
https://threatpost.com/wp-live-chat-wordpress-plugin-re-patches-file-upload-flaw/144420/

Miscellaneous

Original Researcher
Alert logic
Submitter
Ryan Dewhurst
Submitter website
https://wpscan.io
Submitter twitter
ethicalhack3r
Verified
No
WPVDB ID
301fd22d-5cd9-4e0d-a2dd-cc7eb39740db

Timeline

Publicly Published
2019-05-07 (about 7 years ago)
Added
2019-05-29 (about 6 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2026-04-03
Title
Listeo-Core - Directory Plugin by Purethemes < 2.0.28 - Unauthenticated Arbitrary Media Upload
Published
2025-06-23
Title
Aiomatic - AI Content Writer, Editor, ChatBot & AI Toolkit < 2.5.1 - Authenticated (Subscriber+) Arbitrary File Upload
Published
2014-08-01
Title
Really Easy Slider 0.1 - Shell Upload
Published
2025-07-03
Title
AiBud WP <= 1.9 - Admin+ Arbitrary File Upload
Published
2014-08-01
Title
chikuncount - ofc_upload_image.php Arbitrary File Upload