Cnvrse

Cnvrse has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it is fixed as of September 2026. Their average CVSS score is 5.3, and the most serious one scores 5.3 out of 10.

The most common weakness is Authorization Bypass Through User-Controlled Key, behind 1 of the records (100%).

The one issue recorded for Cnvrse has a vendor fix available, so running the current release closes it.

All of these findings were reported by Athiwat Tiprasaharn (Jitlada). The current release is tested up to WordPress 7.1.

Strategic Overview

Avg CVSSMedium
5.3/ 10
Patch Coverage100%
Open

0

Fixed

1

Get automatic notifications for all Cnvrse vulnerabilities before they are exploited.

Highest severity on recordCVSS 5.3CVE-2025-69394

Cnvrse < 026.02.10.20 - Unauthenticated Insecure Direct Object Reference

Read the full analysis

Vulnerability Records

1 records
Cnvrse banner
Latestv26.09.03.15
5.0(1)
100/100
Last Updated
2026-09-03 (9d ago)
Active Installs
0+
Downloads
1,441
Requires WP
6.1+
Requires PHP
7.4+
Tested up to
WP 7.1
Created
2025-11-28 (10mo ago)

The fastest way to add live chat to WordPress. Cnvrse lets you chat with visitors directly from your WordPress admin, Telegram, or Discord. No hosted chat account or monthly fee is required. Why Cnvrse? Most live chat plugins require external accounts, charge monthly fees, or make you install yet another app. We compare the trade-offs honestly in Cnvrse vs Intercom vs Drift. Cnvrse is different: Ready in seconds: install, activate, and a chat widget appears on your site. No signup, no configuration needed. Reply from your phone: connect Telegram or Discord and reply to visitors from the app you already use. Or just use the WordPress dashboard. No monthly fees: free forever. No per-seat pricing, no message limits, no “upgrade to reply.” Your conversations, your site: conversations stay in your WordPress database. Optional messaging integrations forward chat content only when connected. Won’t slow your site down: lightweight and fast. Your PageSpeed score stays the same. Key Features Live Chat Widget A clean, modern chat bubble that matches any theme. Customize colors and greeting text from Settings. Real-Time Dashboard See active visitors, ongoing conversations, and message history. Reply instantly without leaving WordPress. Telegram Integration (Optional) Connect your Telegram bot to receive instant notifications and reply to visitors from your phone. Messages arrive instantly. Discord Integration (Optional) Connect a Discord bot to receive visitor messages in your Discord server. Reply directly from any Discord channel; messages sync back to the chat widget automatically. Connect one or both messaging channels simultaneously. Visitor Intelligence See visitor browser, current page, and browsing journey. Know context before you reply. Conversation Management Organize chats with Open/Pending/Closed status. Auto-close inactive conversations. Never lose a lead. Perfect For Small business websites needing simple customer support WooCommerce stores wanting pre-sale chat Freelancers and agencies managing client sites Teams already using Telegram or Discord for communication Anyone who wants live chat without the bloat How It Works Install and activate Cnvrse Chat widget appears on your site immediately Visitors send messages and you get notified Reply from WordPress dashboard, Telegram, or Discord That’s it. No configuration required. Telegram Setup (Optional) Want to reply from your phone? Connect Telegram in 2 minutes: Create a bot via @BotFather on Telegram Paste your bot token in Cnvrse Settings Click Connect. Cnvrse auto-detects your Chat ID Receive notifications and reply from anywhere Detailed Telegram setup guide Discord Setup (Optional) Prefer Discord? Connect in 5 minutes: Create a bot at the Discord Developer Portal Add the bot to your server Paste your bot token and channel ID in Cnvrse Settings Click Connect. Visitor messages appear in your Discord channel Detailed Discord setup guide Coming in Pro Permanent conversation history Multiple chat agents Canned responses Business hours & offline mode File sharing Chat transcripts via email Priority support Slack and WhatsApp Business channels Learn about Cnvrse Pro Additional Info Documentation: cnvrse.com/help Support: cnvrse.com/support Contact: cnvrse.com/contact Pro Version: cnvrse.com/pro Languages: English (more coming soon: help translate) Third-Party Services Cnvrse optionally integrates with the following third-party services when you choose to connect them: Telegram Bot API When you connect a Telegram bot, visitor chat messages are forwarded to your Telegram chat via the Telegram Bot API. Your replies are received via webhook. This service is provided by Telegram FZ-LLC. By connecting Telegram, you agree to the Telegram Terms of Service and Privacy Policy. Discord API When you connect a Discord bot, visitor chat messages are forwarded to your Discord server via the Discord API. Your replies are polled periodically. This service is provided by Discord Inc. By connecting Discord, you agree to the Discord Terms of Service and Privacy Policy. Cnvrse is not affiliated with, endorsed by, or sponsored by Telegram or Discord. All trademarks are the property of their respective owners.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C