Skip to content
Founder-led WordPress incident response and care Request an assessment
3zerodigital Request a Website Assessment

Plugin security history

Tidio – Live Chat & AI Chatbots Vulnerability History & Security Timeline

The Wordfence Intelligence dataset currently contains 2 vulnerability records associated with Tidio – Live Chat & AI Chatbots, published between 2019 and 2022.

Dataset last synchronized: 2026-08-03 00:31:25 UTC

At a glance

Security Snapshot

2Total records
0Critical
1High
1Medium
0Low
0Informational
2Patched records
0Currently marked unpatched
2019-11-05First disclosure
2022-09-20Latest disclosure
0 of 2CVE coverage

Year-by-Year Timeline

YearRecordsRelative volume
201911 records
202211 records

Severity Breakdown

SeverityRecordsShare
High150%
Medium150%

Vulnerability-Type Breakdown

CSRF

1 record50%

First: 2019. Latest: 2019.

Information Disclosure

1 record50%

First: 2022. Latest: 2022.

Patch Status

Patched
2
Currently marked unpatched
0
Unknown status
0

Patch status reflects the latest successfully synchronized source dataset and must be checked against the installed version.

Latest Known Patched Versions

  • 5.3.0
  • 4.2.1

Affected-Version History

Ranges are deduplicated by source range record and shown with the associated disclosure and known patched versions.

Affected rangeVulnerabilityPublishedPatched versionSeverity
*-5.2.0Tidio – Live Chat, Chatbots & Email Integration <= 5.2.0 - Sensitive Information DisclosureSeptember 20, 20225.3.0Medium
[*, 4.2.1)Tidio Live Chat < 4.2.1 - Cross-Site Request Forgery to Stored Cross-Site ScriptingNovember 5, 20194.2.1High

Selected source records

Latest Records

Medium

Tidio – Live Chat, Chatbots & Email Integration <= 5.2.0 - Sensitive Information Disclosure

Published: September 20, 2022

Affected versions
*-5.2.0
Patched versions
5.3.0
Original Wordfence record
High

Tidio Live Chat < 4.2.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting

Published: November 5, 2019

Affected versions
[*, 4.2.1)
Patched versions
4.2.1
Original Wordfence record

Highest-Severity Records

High

Tidio Live Chat < 4.2.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting

Published: November 5, 2019

Affected versions
[*, 4.2.1)
Patched versions
4.2.1
Original Wordfence record
Medium

Tidio – Live Chat, Chatbots & Email Integration <= 5.2.0 - Sensitive Information Disclosure

Published: September 20, 2022

Affected versions
*-5.2.0
Patched versions
5.3.0
Original Wordfence record

View all associated vulnerabilities

Need help reviewing an exposed WordPress website?

Running an affected version does not prove that a website was compromised. Suspicious redirects, unknown administrators, injected content, unexpected files or recurring malware may require a manual investigation.

Vulnerability data: Wordfence Intelligence. Analysis and practical guidance: 3Zero Digital.

Data Source, Attribution and Methodology

This page aggregates active Production Feed records. Counts are not software-quality rankings, and an affected version does not prove exploitation or infection. Read the full methodology.

Return to the Security History Directory