Chatroll Live Chat
Chatroll Live Chat has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it is fixed as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for Chatroll Live Chat has a vendor fix available, so running the current release closes it.
All of these findings were reported by Peter Thaleikis. Chatroll Live Chat is installed on roughly 200 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.
CVE-2024-12464Chatroll Live Chat <= 2.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Read the full analysisVulnerability Records
Chatroll Live Chat
Author
Chatroll
Add live chat to your WordPress or BuddyPress sidebar, posts and pages. Chatroll can be fully customized to match your site’s design. Plugin Highlights: Easy to Use Persistent, real-time chat for your WordPress pages, posts or sidebar Instantly add live chat to posts and pages using the ‘chatroll’ shortcode Seamless integration with WordPress and BuddyPress profiles Supports many popular WordPress avatar plugins Supports additional logins: Facebook, Twitter, Guest (anonymous) Beautiful Design Clean, clutter-free user interface Customize colors, size and CSS to match your site’s design Available in 11 languages Powerful Moderation Tools Moderation tools include: one-click message deletion, profanity filters, user banning and IP blocking Add administrators and moderators Robust private chat capabilities Manual approval mode for Q&A Pin status messages on top of the chat Works Everywhere Works on ALL browsers and devices, including mobile and desktop HTML5 compatible – no Java or Flash necessary, no software to install Cloud Based All traffic hosted on Chatroll’s servers for rock-solid performance On-demand scaling – Supports unlimited users in chat Automatic updates – get all of Chatroll’s latest features and fixes automatically Tags chat, live chat, chatroll, sidebar, Facebook, Twitter, admin, WordPress chat, WordPress plugin, WordPress live chat, WordPress live chat plugin, BuddyPress chat plugin, BuddyPress live chat plugin, chat box, online chat, chat online, chat plugin, chat software, chat widget, chat system, moderated chat, private chat, css, custom css, customize css, analytics, white label, message history, scalable chat, video streaming, live video, live streaming, streaming, webcast, webcasting, livecast, commenting system, live event chat, engagement, engage, real time engagement, real time chat, live chat, live chat software, live chat services, live chatting, live help, live support, live web chat, livechat, php live chat, guest login, online chat, online support, support chat, single chat, single chat free, free chat, chatbox, commenting, commenting system, contact plugin, contact us, customer support, free chat, IM Chat, shoutbox, social, social chat, support software, website chat, widget
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C