We are getting in touch to let you know about multiple security vulnerabilities in the
82 Live Chat WordPress plugin which you may have purchased or downloaded. The plugin versions 2.2 and earlier are affected by cross-site scripting (XSS), cross-site request forgery (CSRF) and SQL Injections.
When we were alerted to the issues, we validated the report, removed the item from the Envato Marketplace and requested an update from the author. An updated version that resolves the vulnerabilities has not been made available to us though.
What You Should Do
We are strongly encouraging you to remove the plugin from your installation and contact 82designs, the creators of the plugin, if you need further assistance.
The author can be emailed directly through the contact form on their
Для просмотра ссылки Войди или Зарегистрируйся.
