Pure Chat – Live Chat & More!
Pure Chat – Live Chat & More! has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2024 and 2025; all 3 are fixed as of September 2026. Their average CVSS score is 6.0, and the most serious one scores 6.4 out of 10. 2024 was the busiest year with 2 disclosures.
The most common weakness is Cross-Site Scripting, behind 2 of the records (67%). Other recurring categories include Cross-Site Request Forgery (CSRF).
Every one of the 3 issues recorded for Pure Chat – Live Chat & More! has a vendor fix available, so running the current release closes all known holes.
3 independent researchers contributed these findings, one record each. Pure Chat – Live Chat & More! is installed on roughly 3,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.7.7.
CVE-2024-3595Pure Chat – Live Chat Plugin & More! <= 2.22 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Read the full analysisVulnerability Records
Pure Chat – Live Chat & More!
Author
pure-chat
Pure Chat is a Live Chat plugin for WordPress. It offers unlimited chats. All chat widget customizations, transcript history, triggers, email forms (when unavailable), etc. Pure Chat PRO offers realtime analytics, visitor tracking and contact tracking features. Start your free-trial and get all the features of the PRO plan for 30 days free! For more information, visit PureChat.com
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C