Contact Forms, Live Support, CRM, Video Messages
Contact Forms, Live Support, CRM, Video Messages has one disclosed vulnerability in the WordSec catalog, all reported in 2024; it is fixed as of September 2026. Their average CVSS score is 5.3, and the most serious one scores 5.3 out of 10.
The most common weakness is Exposure Of Sensitive Information To An Unauthorized Actor, behind 1 of the records (100%).
The one issue recorded for Contact Forms, Live Support, CRM, Video Messages has a vendor fix available, so running the current release closes it.
All of these findings were reported by Joshua Chan. Contact Forms, Live Support, CRM, Video Messages is installed on roughly 10 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.8.8.
CVE-2024-49235Contact Forms, Live Support, CRM, Video Messages <= 1.10.3 - Unauthenticated Information Disclosure
Read the full analysisVulnerability Records

Contact Forms, Live Support, CRM, Video Messages
Author
videowhisper
Revamp your customer service with this powerful tool that combines contact forms, support tickets, chat, and a comprehensive CRM system to enhance interaction and efficiency. Manage conversations front and back end, attach multimedia files, webcam recordings and customize contact forms for specific needs. A floating icon and reporting buttons on content facilitate communication, making it ideal for any business aiming to improve responsiveness and customer satisfaction. Benefits Unified Communication Platform: Integrates contact forms, support, chat, CRM into a single, efficient workflow. Enhanced Multimedia Support: Users can send messages with webcam, screen, and microphone recordings, enhancing interactive support. Customizable Contact Forms: Tailor contact forms with custom fields to collect specific information needed for various departments. Advanced Conversation Management: Manage and monitor conversations from both frontend and backend, improving service responsiveness. Email Confirmation for Security: Protects against spam by requiring email confirmation from visitors before starting conversations. Multilanguage Support: Offers real-time translation of messages with DeepL integration, catering to a global audience. Monetization Options: Integrates with the MicroPayments Plugin for paid support options, allowing for flexible revenue models. Comprehensive Reporting Tools: Easily report and manage content directly from posts with configurable buttons, enhancing content control. Features Support pages in website frontend for starting/accessing conversations Members can open a conversation directly, while visitors have to confirm their email first Admins can see and access open Conversations from backend Report Content button for any post types (configurable) Contact Owner button for any post types (configurable) Contact Creator in BuddyPress/BuddyBoss profile for configurable roles My Conversations page to website frontend, to access own tickets by logged in users Custom support departments for website / report content / contact content owner / contact user Floating support buttons (contact, new messages) on all pages (can be disabled) Message counter in backend (site support) and frontend (for creators) Send webcam/screen/microphone recordings and file uploads in conversations Custom contact forms with custom fields (text, dropdown, toggle) and data saved per contact Custom form per department enables custom fields per conversation (ticket) Invite by email to fill a form, contact a department or join a new conversation Can messages, add to later messages for quick replies Integrates with MicroPayments Plugin for paid support (per conversation, message) Registration forms: register accounts in an external MySQL database, in example for VideoWhisper WebRTC server Multilanguage conversations with DeepL integration for translating messages on request More features to come … License This plugin is released under a GPL license.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C