Holithemes vulnerabilities
We track 2 vulnerabilities in Holithemes products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 14, 2026.
2vulnerabilities
1critical
1high
0exploited
8.9average CVSS score
Latest Holithemes vulnerabilities
- 9.1 Critical severity
Click to Chat – HoliThemes: Improper Control of Generation of Code
The Click to Chat for WhatsApp plugin for WordPress is vulnerable to Arbitrary Shortcode Execution in versions up to, and including, 4.44 This is due to the greetings_dialog() function building the {url} template placeholder from a sanitize_text_field()-filter
- 8.8 High severity
Click to Chat – HoliThemes: Improper Control of Filename for Include/Require Statement in PHP Program
The Click to Chat – HoliThemes plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.35. This makes it possible for authenticated attackers, with contributor access or above, to include and execute arbitrary files o