CVE-2018-18460

Name of the Vulnerable Software and Affected Versions wp-live-chat-support version 8.0.15

Description A security issue exists in the wp-live-chat-support plugin for WordPress. The problem is related to the term parameter in the "modules/gdpr.php" file. This issue can be exploited through a request to the "/wp-admin/admin.php" endpoint, specifically the "wplivechat-menu-gdpr-page" page.

Recommendations For wp-live-chat-support version 8.0.15, consider restricting access to the vulnerable term parameter in the "modules/gdpr.php" file until a patch is available. As a temporary workaround, avoid using the term parameter in the affected API endpoint "/wp-admin/admin.php" wplivechat-menu-gdpr-page request until the issue is resolved.