WordPress plugin
3CX Free Live Chat, Calls & Messaging security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 15 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical2
- High1
- Medium12
- Low0
All 3CX Free Live Chat, Calls & Messaging vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| High8.8 | Local File Inclusion ≤9.4.2Update to 9.4.3 | — | |
| Medium5.4 | Stored Cross-Site Scripting ≤8.1.9Update to 8.2.0 | — | |
| Critical9.8 | Unprotected Functions <8.0.33Update to 8.0.33 | CVE-2019-12498 | |
| Medium6.1 | Unauthenticated Stored Cross-Site Scripting ≤8.0.26Update to 8.0.27 | CVE-2019-14950 | |
| Medium6.1 | Cross-Site Scripting <8.0.18Update to 8.0.18 | CVE-2019-9913 | |
| Medium6.1 | Cross-Site Scripting ≤8.0.15Update to 8.0.16 | CVE-2018-18460 | |
| Medium6.1 | Cross-Site Scripting ≤8.0.07Update to 8.0.08 | CVE-2018-11105 | |
| Medium6.1 | Stored Cross-Site Scripting ≤8.0.05Update to 8.0.06 | CVE-2018-9864 | |
| Medium6.1 | Cross-Site Scripting ≤7.1.04Update to 7.1.05 | CVE-2017-18507 | |
| Medium6.1 | Cross-Site Scripting ≤7.1.02Update to 7.1.03 | CVE-2017-18508 | |
| Medium6.1 | Cross-Site Scripting ≤7.0.06Update to 7.0.07 | CVE-2017-2187 | |
| Medium6.1 | Unauthenticated Stored Cross-Site Scripting ≤6.2.03Update to 6.2.04 | CVE-2016-10879 | |
| Medium6.4 | Stored Cross-site Scripting ≤4.3.5Update to 4.4.0 | — | |
| Critical9.8 | Blind SQL Injection ≤4.3.5Update to 4.4.0 | — | |
| Medium6.1 | JavaScript Code Injection <4.1.0Update to 4.1.0 | CVE-2014-10386 |
- High8.8Local File Inclusion
≤9.4.2Update to 9.4.3
- Medium5.4Stored Cross-Site Scripting
≤8.1.9Update to 8.2.0
- Critical9.8Unprotected Functions
<8.0.33Update to 8.0.33
- Medium6.1Unauthenticated Stored Cross-Site Scripting
≤8.0.26Update to 8.0.27
- Medium6.1Cross-Site Scripting
<8.0.18Update to 8.0.18
- Medium6.1Cross-Site Scripting
≤8.0.15Update to 8.0.16
- Medium6.1Cross-Site Scripting
≤8.0.07Update to 8.0.08
- Medium6.1Stored Cross-Site Scripting
≤8.0.05Update to 8.0.06
- Medium6.1Cross-Site Scripting
≤7.1.04Update to 7.1.05
- Medium6.1Cross-Site Scripting
≤7.1.02Update to 7.1.03
- Medium6.1Cross-Site Scripting
≤7.0.06Update to 7.0.07
- Medium6.1Unauthenticated Stored Cross-Site Scripting
≤6.2.03Update to 6.2.04
- Medium6.4Stored Cross-site Scripting
≤4.3.5Update to 4.4.0
- Critical9.8Blind SQL Injection
≤4.3.5Update to 4.4.0
- Medium6.1JavaScript Code Injection
<4.1.0Update to 4.1.0
3CX Free Live Chat, Calls & Messaging: common questions
Does 3CX Free Live Chat, Calls & Messaging have known vulnerabilities?
Yes. VulnCrest Radar lists 15 known vulnerabilities in 3CX Free Live Chat, Calls & Messaging: 2 critical, 1 high, 12 medium. None are known to affect version null.
How do I check which version of 3CX Free Live Chat, Calls & Messaging I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent 3CX Free Live Chat, Calls & Messaging vulnerability?
4c298a24-b68b-450e-b823-f91841046783, published Apr 28, 2022: 3CX Live Chat <= 9.4.2 - Local File Inclusion. Severity: High (CVSS 8.8).
Is any 3CX Free Live Chat, Calls & Messaging vulnerability listed in CISA KEV?
No. None of the known 3CX Free Live Chat, Calls & Messaging vulnerabilities is currently listed in the CISA KEV catalog.