drupal Tawk.to - Live chat application vulnerabilities

Latest drupal Tawk.to - Live chat application CVEs

Newest publication first

1. CVE-2026-96388 Tawk.to - Live chat application - Critical - Cross Site Request Forgery - SA-CONTRIB-2026-184

   Published 2026-10-22

   Medium·CVSS 5.4 EPSS 0.12%

   Cross-Site Request Forgery (CSRF) vulnerability in Drupal Tawk.to - Live chat application allows Cross Site Request Forgery. This issue affects Tawk.to - Live chat application versions: from 0.0.0 to 3.0.4.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.