WSChat – WordPress Live Chat

WSChat – WordPress Live Chat has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it is fixed as of September 2026. Their average CVSS score is 4.3, and the most serious one scores 4.3 out of 10.

The most common weakness is Missing Authorization, behind 1 of the records (100%).

The one issue recorded for WSChat – WordPress Live Chat has a vendor fix available, so running the current release closes it.

All of these findings were reported by Powpy. WSChat – WordPress Live Chat is installed on roughly 40 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.

Strategic Overview

Avg CVSSMedium
4.3/ 10
Patch Coverage100%
Open

0

Fixed

1

Get automatic notifications for all WSChat – WordPress Live Chat vulnerabilities before they are exploited.

Highest severity on recordCVSS 4.3CVE-2025-12751

WSChat – WordPress Live Chat <= 3.1.6 - Missing Authorization to Authenticated (Subscriber+) Settings Reset

Read the full analysis

Vulnerability Records

1 records
WSChat – WordPress Live Chat banner
Latestv3.1.9

WSChat – WordPress Live Chat

ELEXtensions

Author

ELEXtensions

5.0(1)
100/100
Last Updated
2026-09-10 (3d ago)
Active Installs
40+
Downloads
6,851
Requires WP
4.3+
Requires PHP
0+
Tested up to
WP 7.1
Created
2021-07-12 (5y ago)

WordPress Live Chat Made Simple! Unlike other Live Chat plugins, this plugin works within WordPress with no external API calls. Let’s you connect to your customers in real-time. Introduction WSChat – ELEX WordPress Live Chat Plugin is a lightweight yet robust plugin that helps to integrate live chat on your website to help your customers reach you most conveniently! Unlike other Live Chat plugins, this plugin works within WordPress with no external API calls. We recommend using a dedicated server. As an alternative option, We have even integrated pusher WebSockets APIs, to make it work on any servers. Many customers prefer live chat to connect with organizations over emails and social media as there are better chances to get a quick response compared to other sources. Customers often need your assistance right before they make a purchase decision, or in a critical situation in which they need an immediate solution. So, the ideal option is sending a quick text through the live chat window rather than typing a long formal email. Using this live chat solution, agents can easily reply, assist, and take up a chat conversation if a customer needs assistance in the future as all conversations are recorded in the same chat thread. Live Chat Made Simple! Unlike other Live Chat plugins, this plugin works within WordPress with no external API calls. Let’s you connect to your customers in real-time. Main Features Live Chat Widget with Pre-Chat Form Optimised for WordPress WooCommerce Integration: Quick Glance on Customer’s Recent Orders & Related Details Dialogflow AI Integration to Setup Auto Replies Easily Convert Customer Suggestions to Ideas Board using Tag Feature Unlimited Agents with Roles & Capabilities Supports Adding Multiple Agents to the Same Chat Revisit Old Chat Conversations in History Tab Customize the Chat Widget to Match the Site Theme Highly Customisable Pre-Chat Form Configure Auto Reply Message Unlimited Chat History Restrict Live Chat On Specific Pages Agent Alerts Customize Live Chat Widget Integration with Pusher for making your communications simple, reliable & secure. Interesting Emojis Show Chat Widget only on Specific Pages Email the Chat Transcript & Feedback Automatically Mobile Responsive Raise a Support Ticket from the Chat Board in Few Clicks by ELEX WordPress Help Desk & Customer Support Ticketing Plugin integration. Premium Version Features For complete list of latest features and details, please visit WSChat – ELEX WordPress Live Chat Plugin premium version product page. * OpenAI ChatGPT Integration for Auto-Generated Responses * Real-Time Visitor Tracking * Allow the Agent to Initiate the Chat About Pusher Pusher Channels is a hosted WebSockets solution for building powerful real-time interactive apps. Bi-directional data exchange/transfer transmits data in both directions simultaneously through a single connection, you can greatly reduce unnecessary network traffic and delay. About ELEXtensions We are a group of WordPress and WooCommerce enthusiasts with a vision to solve genuine problems related to WordPress & WooCommerce stores. We offer a wide variety of extensions for WooCommerce. We have premium extensions related to many domains including Shipping, Pricing, Payments and Customer Support. Support Reach us at https://elextensions.com/support/

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C