Stored Cross-Site Scripting (XSS) via Cross-Site Request Forgery (CSRF) issues

Make sure you upgrade to the current release of this app – they had security issues for months and didn’t inform any of there clients, I only found out there was an issue, one day the plugin was removed from the WordPress store temporarily, that is never a good sign.. Just a classic way to get into your site through javascript.

Stored Cross-Site Scripting (XSS) via Cross-Site Request Forgery (CSRF) vulnerability

Look for other option not Jivochat