Does Live Chat by User.com have any unpatched vulnerabilities?

No. All known vulnerabilities in Live Chat by User.com have been patched as of the latest data update. Always keep the plugin updated to the latest version.

Is Live Chat by User.com compatible with WordPress 6.6.5?

According to WordPress.org data, Live Chat by User.com 1.4.2 has been tested up to WordPress 6.6.5. Check the plugin's changelog for the latest compatibility information.

How often is Live Chat by User.com updated?

Live Chat by User.com was last updated on Sep 5, 2024. Frequent updates are generally a positive security signal.

What is Live Chat by User.com's security score?

Live Chat by User.com has a WP-Safety security score of 92/100. This score is computed from CVE history, patch response time, developer trust signals, and plugin maintenance activity.

Live Chat by User.com Security & Risk Analysis

wordpress.org/plugins/userengage-live-chat-marketing-automation-integration

With Live Chat by User.com you can chat with any visitor on your website with a simple Wordpress plugin.

200 active installs v1.4.2 PHP + WP 3.4.1+ Updated Sep 5, 2024

chat-pluginlive-chatuser-comwordpress-chatwordpress-live-chat

A · Safe

CVEs total0

Unpatched0

Last CVENever

Download

Safety Verdict

Is Live Chat by User.com Safe to Use in 2026?

Generally Safe

Score 92/100

Live Chat by User.com has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 1yr ago

Risk Assessment

The plugin "userengage-live-chat-marketing-automation-integration" version 1.4.2 exhibits a strong security posture based on the provided static analysis. There are no identified entry points like AJAX handlers, REST API routes, shortcodes, or cron events that are exposed, and importantly, none of these are unprotected. The code also demonstrates good practices by avoiding dangerous functions, using prepared statements for all SQL queries, and not performing file operations or external HTTP requests. The absence of any taint analysis findings and a clean vulnerability history further reinforces this positive assessment.

Key Concerns

Output escaping is not consistently applied
No nonce checks implemented
No capability checks implemented

Vulnerabilities

None known

Live Chat by User.com Security Vulnerabilities

No known vulnerabilities — this is a good sign.

Code Analysis

Analyzed Mar 16, 2026

Live Chat by User.com Code Analysis

Dangerous Functions

Raw SQL Queries

0 prepared

Unescaped Output

5 escaped

Nonce Checks

Capability Checks

File Operations

External Requests

Bundled Libraries

Output Escaping

45% escaped11 total outputs

Attack Surface

Live Chat by User.com Attack Surface

Entry Points0

Unprotected0

WordPress Hooks 11

actionadmin_enqueue_scriptsuserengage.php:39

actionwp_headuserengage.php:111

actionwoocommerce_after_add_to_cart_buttonuserengage.php:129

actionuser_registeruserengage.php:158

actionwoocommerce_thankyouuserengage.php:160

actionwp_headuserengage.php:196

filterscript_loader_taguserengage.php:232

actionwp_enqueue_scriptsuserengage.php:234

actionadmin_inituserengage.php:242

actionadmin_menuuserengage.php:246

actionwp_headuserengage.php:250

Maintenance & Trust

Live Chat by User.com Maintenance & Trust

Maintenance Signals

WordPress version tested6.6.5

Last updatedSep 5, 2024

PHP min version

Downloads10K

Community Trust

Rating100/100

Number of ratings2

Active installs200

Alternatives

Live Chat by User.com Alternatives

JivoChat Live Chat – WP live chat plugin for WordPress

jivochat

Omnichannel Live Chat and Help Desk plugin, optimized for WordPress. Free, fast, easy to install and to use. Turn your visitors into happy customers!

20K 1 CVE

Live Chat Plugin for Elementor – LiveChat

livechat-elementor

100

A hassle-free WordPress Elementor live chat plugin for sales and customer support.

30 1 CVE

Live Chat Plugin for WooCommerce – LiveChat

livechat-woocommerce

100

Live chat and help desk software plugin for WooCommerce. Add live chat to your WooCommerce store to connect immediately with customers.

1K 1 CVE

Replain

replain

Be in touch with your clients through Telegram, WhatsApp or Facebook Messenger. Fast, functional and free live-chat service for your website.

800 No CVEs

LiveAgent – Omnichannel Help Desk & Live Chat Software

liveagent

LiveAgent is a multichannel help desk software that offers over 180 help desk and live chat features. Discover the power of the universal inbox, a hyb …

500 1 CVE

Developer Profile

Live Chat by User.com Developer Profile

User.com

2 plugins · 220 total installs

trust score

Avg Security Score

89/100

Avg Patch Time

30 days

View full developer profile

Detection Fingerprints

How We Detect Live Chat by User.com

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths

/wp-content/plugins/userengage-live-chat-marketing-automation-integration/assets/css/style.css/wp-content/plugins/userengage-live-chat-marketing-automation-integration/assets/js/ue.js

Script Paths

https://app.userengage.com/widget.js

Version Parameters

userengage-live-chat-marketing-automation-integration/assets/js/ue.js?ver=1.1

HTML / DOM Fingerprints

Data Attributes

data-cfasync='false'

JS Globals

window.civchatwindow.userIDwindow.userNamewindow.userEmail

FAQ