Crisp – Live Chat and AI Chatbot

Crisp – Live Chat and AI Chatbot has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2021 and 2024; all 2 are fixed as of October 2026. Their average CVSS score is 7.6, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 1 high.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (50%). Other recurring categories include Cross-Site Scripting.

Every one of the 2 issues recorded for Crisp – Live Chat and AI Chatbot has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, one record each. Crisp – Live Chat and AI Chatbot is installed on roughly 20,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.3.

Strategic Overview

Avg CVSSHigh
7.6/ 10
Patch Coverage100%
Open

0

Fixed

2

Get automatic notifications for all Crisp – Live Chat and AI Chatbot vulnerabilities before they are exploited.

Highest severity on recordCVSS 8.8CVE-2021-43353

Crisp Live Chat <= 0.31 Cross-Site Request Forgery to Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

2 records
Crisp – Live Chat and AI Chatbot banner
Latestv0.49

Crisp – Live Chat and AI Chatbot

crisp

Author

crisp

4.6(73)
92/100
Last Updated
2026-10-21 (7d ago)
Active Installs
20,000+
Downloads
781,643
Requires WP
3.0.1+
Requires PHP
5.3+
Tested up to
WP 7.1.3
Created
2016-01-19 (11y ago)

Crisp is a Live Chat and AI Chatbot plugin for WordPress that helps you talk to website visitors, answer customer questions 24/7, and manage customer support from one place. Install Crisp on your WordPress website in a few clicks, with no coding required. Use live chat to engage visitors in real time, automate repetitive questions with AI, and give your team the tools they need to support customers faster. Discover Crisp: https://crisp.chat/ Learn more about Crisp for WordPress: https://crisp.chat/en/integrations/wordpress/ Live Chat for WordPress Turn website visitors into conversations and customers. Add a fast, customizable live chat widget to your WordPress website and talk to visitors when they need help. Answer questions before they leave, remove friction during the buying journey, capture leads, and support customers directly from your website. Customizable chat widget → match the chat experience with your WordPress website and brand. Proactive messages → engage visitors at the right moment instead of waiting for them to contact you. Mobile and desktop apps → answer visitors and customers wherever you are. Real-time notifications → know when someone starts a conversation so you can reply quickly. AI Chatbot for WordPress Support customers 24/7 without increasing your workload. Hugo, Crisp’s AI Agent, works as an AI chatbot that answers repetitive customer questions automatically using your own business knowledge. Give customers instant answers when your team is unavailable, reduce waiting time, and let your team focus on requests where human support makes a difference. Website training → let Hugo learn from the content already available on your WordPress website. Knowledge sources → add help articles, files, and other business content to improve AI answers. Custom instructions → define how your AI chatbot should behave and respond to customers. Human escalation → automatically hand conversations over to your team when human help is needed. Learn more about Crisp AI Chatbot: https://crisp.chat/en/chatbot/ Shared Inbox for Customer Support Keep every customer conversation under control. Bring WordPress live chat, email, WhatsApp, Messenger, Instagram, and other channels into one shared inbox. Give your team the full conversation context, reduce tool switching, and make sure customers always reach the right person. Private notes → collaborate with teammates without involving the customer. Conversation history → understand previous interactions before replying. Assignments and routing → send conversations to the right teammate or team. Multichannel inbox → manage customer conversations from multiple channels in one place. AI Copilot for Support Teams Help your team resolve customer conversations faster. Crisp AI Copilot helps support agents understand requests, write answers, and take over conversations faster. Reduce repetitive work and help your team handle more customer conversations without sacrificing response quality. AI summaries → understand long conversations in seconds. Draft replies → spend less time writing repetitive answers. Conversation context → generate more relevant replies based on what the customer already said. AI handover → give agents useful context when they take over from Hugo. WooCommerce Customer Support Help WooCommerce customers without constantly switching tools. Connect Crisp with WooCommerce to keep useful ecommerce context close to every customer conversation. Understand purchase-related questions faster and give your team the information they need to help customers. Order history → check previous purchases while talking to a customer. Cart context → understand what a customer is currently trying to buy. Customer information → keep useful WooCommerce data close to the conversation. More ways Crisp helps you manage customer support Crisp gives WordPress businesses more tools to engage visitors, understand customers, and improve their support as they grow. Analytics → track conversation volume, response times, and customer satisfaction. Campaigns → send targeted messages to specific groups of customers or leads. Triggers → automatically display messages based on visitor behavior on your website. Contact management → keep customer profiles, attributes, and history organized in one place. Integrations → connect Crisp with the other tools your business already uses. Whether you want to add a free live chat to your WordPress website, automate customer support with an AI chatbot, or give your team a better way to manage customer conversations, Crisp helps you support visitors and customers from one place as your business grows. Trusted by customer support teams Crisp is rated 4.5/5 on G2 and 4.6/5 on Capterra by hundreds of verified users. “Crisp is incredibly easy to use and set up, making customer communication seamless.” Pedro M., Founder & Director — 5/5 on G2 “Works really well with our e-commerce stores – both Shopify and WooCommerce.” Steinar L., Co-founder — 5/5 on Capterra “It’s value for money already bringing us a 40% reduction in queries.” Leandi M., Product Manager & Conversational AI — 5/5 on Capterra Read more Crisp reviews on G2: https://www.g2.com/products/crisp/reviews Read more Crisp reviews on Capterra: https://www.capterra.com/p/151292/Crisp/reviews/

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C