Click to Chat – HoliThemes vulnerabilities

2 known vulnerabilities in Click to Chat – HoliThemes from Holithemes. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.1 Critical severity

  Click to Chat – HoliThemes: Improper Control of Generation of Code

  CVE-2026-92097Oct 14, 2026Holithemes

  The Click to Chat for WhatsApp plugin for WordPress is vulnerable to Arbitrary Shortcode Execution in versions up to, and including, 4.44 This is due to the greetings_dialog() function building the {url} template placeholder from a sanitize_text_field()-filter

• 8.8 High severity

  Click to Chat – HoliThemes: Improper Control of Filename for Include/Require Statement in PHP Program

  CVE-2024-3849May 2, 2024HolithemesEPSS 1.69%

  The Click to Chat – HoliThemes plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.35. This makes it possible for authenticated attackers, with contributor access or above, to include and execute arbitrary files o