Input validation vulnerability in 3CX Free Live Chat 4.3.5

The WP Live Chat Support plugin for WordPress is vulnerable to a security issue called blind SQL Injection. This vulnerability affects versions up to and including 4.3.5. It happens when there is not enough security in the way user-supplied information is handled, and when not enough preparation is done on the existing SQL query. This makes it possible for attackers who do not need to be authenticated to add extra SQL queries to existing ones and use them to get sensitive information from the database.