Tawk.To Live Chat
Tawk.To Live Chat has one disclosed vulnerability in the WordSec catalog, all reported in 2021; it is fixed as of September 2026. Their average CVSS score is 8.0, and the most serious one scores 8.0 out of 10. Severity breakdown: 0 critical and 1 high.
The most common weakness is Missing Authorization, behind 1 of the records (100%).
The one issue recorded for Tawk.To Live Chat has a vendor fix available, so running the current release closes it.
All of these findings were reported by Quentin VILLAIN (3wsec). Tawk.To Live Chat is installed on roughly 100,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.
CVE-2021-24914Tawk.To Live Chat <= 0.5.4 - Missing Authorization to Visitor Monitoring & Chat Removal
Read the full analysisVulnerability Records

Tawk.To Live Chat
Author
tawkto
Free messaging app to monitor and chat with site visitors Gain insight Gain valuable insights when you monitor and chat with website visitors in real time. Increase conversions Greet new and returning visitors, help them through pain points, and message before they leave your page. Stay connected Stay connected anywhere and respond to your customers from your computer or mobile device. About tawk.to Live Chat The tawk.to Live Chat app makes it easy to monitor and chat with visitors on all your WordPress websites. Be there when they need you with unlimited messaging, ticketing and your own Knowledge Base — all 100% FREE. Compatible with all modern browsers, tawk.to was created in response to the growing need for businesses to respond in real time, with real people. Never lose another lead or sale again — tawk.to offers iOS, Android, Windows and Mac OSX apps to keep you connected wherever you go. Why use tawk.to? tawk.to’s live chat app integrates seamlessly with WordPress. More than 5 million companies use tawk.to to provide real time support and service to their customers. Save time and simplify — monitor and chat with visitors on multiple websites from a single dashboard interface Personalize greetings and share promos with Trigger messages based on your visitor’s location, past visits, page views, and more Easily share answers to FAQs and provide self-help to customers with your own Knowledge Base — included in your free account Create and assign tickets in a built-in support desk and ticketing system, making it easy to follow up and create outstanding customer experiences every time See our full list of features to learn more How much does this cost? tawk.to is completely free — there are no limits to the number of agents, chat volumes or sites you can add widgets to. Don’t have a tawk.to account? Create one for free here! Support tawk.to offers 24×7-365 live support, visit https://www.tawk.to and initiate a chat or send us an email at support@tawk.to.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C