Facebook Chat Plugin – Live Chat Plugin for WordPress

Facebook Chat Plugin – Live Chat Plugin for WordPress has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2019 and 2020; all 2 are fixed as of September 2026. Their average CVSS score is 5.8, and the most serious one scores 7.4 out of 10. Severity breakdown: 0 critical and 1 high.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (50%). Other recurring categories include Improper Access Control.

Every one of the 2 issues recorded for Facebook Chat Plugin – Live Chat Plugin for WordPress has a vendor fix available, so running the current release closes all known holes.

All of these findings were reported by Chloe Chamberland. Facebook Chat Plugin – Live Chat Plugin for WordPress is installed on roughly 70,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 5.9.16.

Strategic Overview

Avg CVSSMedium

5.8/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Facebook Chat Plugin – Live Chat Plugin for WordPress vulnerabilities before they are exploited.

Highest severity on recordCVSS 7.4CVE-2020-36838

Facebook Chat Plugin <= 1.5 - Missing Capabilities Check

Read the full analysis

Vulnerability Records

2 records


2020-08-04 00:00	Facebook Chat Plugin <= 1.5 - Missing Capabilities Check Facebook Chat Plugin < 1.6	`CVE-2020-36838`	7.4 High	Chloe Chamberland	Yes
2019-06-17 00:00	Facebook Chat Plugin <= 1.2 - Cross-Site Request Forgery to Site Settings Changes Facebook Chat Plugin < 1.3	`N/A`	4.3 Medium	Anonymous	Yes

Showing 1–2 of 2 reports

Plugin Profile

Latestv2.5

Facebook Chat Plugin – Live Chat Plugin for WordPress

Author

Facebook

3.5(302)

70/100

Last Updated

2022-07-05 (4y ago)

Active Installs

70,000+

Downloads

1,759,658

Requires WP

3.9+

Requires PHP

5.2.4+

Tested up to

WP 5.9.16

Created

2018-09-26 (8y ago)

Communicate with customers on your website with Messenger-powered chat. Chat Plugin is a chat widget maintained by the Meta Business that enables live chat on your website. Whether they’re on their computer or their phone, website visitors will be able to message you anytime by clicking on a small Messenger chat bubble in the lower right corner of your site. Key features: Website visitors can message you while browsing your site. Set up auto-replies and answers to common questions to serve customers when you’re not available. Continue the conversation with customers on Messenger even after they leave your website. Visitors without a Facebook Messenger account can ask you questions anonymously in Guest mode. Messenger’s familiar interface builds trust. No need to switch between apps to answer questions you get on the website.

View on WordPress.org