WordPress Plugin Vulnerabilities

WP Live Chat Support < 4.4.0 - Unauthenticated Blind SQL Injection

Description

The 3CX Live Chat WordPress plugin was affected by an Unauthenticated Blind SQL Injection security vulnerability.

Affects Plugins

Plugin icon
wp-live-chat-support
Fixed in 4.4.0

References

URL
http://cinu.pl/research/wp-plugins/mail_f9d4050b7cadfab4c84acb4589fdd161.html
URL
http://blog.cinu.pl/2015/11/php-static-code-analysis-vs-top-1000-wordpress-plugins.html

Classification

Type
SQLI
OWASP top 10
A1: Injection
CWE
CWE-89

Miscellaneous

Submitter
ethicalhack3r
Submitter twitter
ethicalhack3r
Verified
No
WPVDB ID
6af4e134-0ceb-4876-b4fe-4a2d9c4b9e6d

Timeline

Publicly Published
2015-07-06 (about 10 years ago)
Added
2015-11-24 (about 10 years ago)
Last Updated
2020-03-21 (about 6 years ago)

Other

Published
Title
Published
2014-08-01
Title
Level Four Storefront - levelfourstorefront/getsortmanufacturers.php id Parameter SQL Injection
Published
2025-05-22
Title
Goodlayers Hostel <= 3.1.2 - Unauthenticated SQL Injection
Published
2026-02-14
Title
Booking Calendar < 10.14.16 - Authenticated (Editor+) SQL Injection
Published
2025-01-13
Title
Course Booking System < 6.0.7 - Unauthenticated SQL Injection
Published
2023-10-30
Title
Message ticker < 9.3 - Authenticated (Subscriber+) SQL Injection via Shortcode