CVE-2026-96388 | Tawk.to Plugin up to 3.0.3 cross-site request forgery

October 22, 2026 Yanac

A vulnerability categorized as problematic has been discovered in Tawk.to Plugin up to 3.0.3. This affects an unknown part. Such manipulation leads to cross-site request forgery.

This vulnerability is traded as CVE-2026-96388. The attack may be launched remotely. There is no exploit available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More