Vulnerabilities > 3CX > Live Chat > 8.0.26

DATE CVE VULNERABILITY TITLE RISK
2020-03-20 CVE-2019-12498 Missing Authorization vulnerability in 3CX Live Chat
The WP Live Chat Support plugin before 8.0.33 for WordPress accepts certain REST API calls without invoking the wplc_api_permission_check protection mechanism.
network
low complexity
3cx CWE-862
critical
 9.8
9.8
2019-08-12 CVE-2019-14950 Cross-site Scripting vulnerability in 3CX Live Chat
The wp-live-chat-support plugin before 8.0.27 for WordPress has XSS via the GDPR page.
network
low complexity
3cx CWE-79
6.1
6.1