Chatra Live Chat + ChatBot + Cart Saver
Chatra Live Chat + ChatBot + Cart Saver has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2025 and 2026; all 2 are fixed as of September 2026. Their average CVSS score is 4.4, and the most serious one scores 4.4 out of 10.
The most common weakness is Cross-Site Scripting, behind 2 of the records (100%).
Every one of the 2 issues recorded for Chatra Live Chat + ChatBot + Cart Saver has a vendor fix available, so running the current release closes all known holes.
2 independent researchers contributed these findings, one record each. Chatra Live Chat + ChatBot + Cart Saver is installed on roughly 2,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.
CVE-2026-12041Chatra Live Chat + ChatBot + Cart Saver <= 1.0.12 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'chatra-code' Setting
Read the full analysisVulnerability Records

Chatra Live Chat + ChatBot + Cart Saver
Author
Chatra
Chatra Live Chat + ChatBot + Facebook + Helpdesk + Cart Saver. Chatra Live Chat allows you to sell more, answering questions and alleviating concerns to help visitors place an order. Use it to collect actionable feedback to improve your store: identify problems, collect contact info and understand your customers better. Work from a web dashboard or desktop apps for Windows & Mac. Chat on the go from iOS/Android apps. Distinctive Features: Real-time visitor list. View the list of visitors who are currently online on your website and start a conversation manually. ChatBots. Use bots to collect visitors’ contacts. Offer quick options for frequently asked questions (FAQ) so that your visitors get the answers they need without a load on your team. Unique exit-intent feature. Catch visitors who are about to leave! Email integration. Connect the email address your customers use to contact you and manage your email conversations alongside chats. Facebook integration. Send and receive chats directly from your Facebook visitors Intelligent form bot. Add your own custom fields (like company name, address or order number) to the contact form and dialogs. Live typing insights. See what customers type before they hit “send”. Save time on preparing an answer. Group chats. Make few agents talk to a customer in a group chat to solve pressing issues and delight with the level of service. Visitor information. Know your customers — what page they are on, where are they from and what device and system they use to access your store. Conversation history. We save past conversations for both you and your customers, so once they return the conversation continues in the same thread, as in a messenger app. Collects contact info. Even when you are offline or unavailable, so that you can get back to customers even if they left your site. Targeted chats (triggers). Initiate conversations when certain criteria are met: target those customers who might be in need of assistance. Correct typos. Correct answers after sending the message. Works everywhere. Never lose a customer again. Even if he’s on Nintendo 3DS or a Windows Phone. Looks & feels as a messenger app. Smooth animations, avatars, beautiful design. Agent photos visible pre-chat. After clicking on the widget, visitors can see photos and names of the online agents, even before they start chatting. This is highly engaging and can lift a number of quality chat interactions. Full Ecwid support. Full WooCommerce support. Work from a browser, desktop or mobile apps. Windows & Mac, Android & iOS. Even on the go we’ve got you covered! Free forever plan. Simple, straightforward pricing: Free forever plan, or $15 per agent/month Web dashboard, desktop apps for Windows & Mac, Android & iOS — we’ve got you covered. Sign up to download! For the full feature list and additional information check https://chatra.com
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C