What’s Vulnerable › Products

holithemes Click to Chat – HoliThemes vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your holithemes Click to Chat – HoliThemes version is affected

Latest holithemes Click to Chat – HoliThemes vulnerabilities

• CVE-2026-92097 — Click to Chat <= 4.44 - Unauthenticated Arbitrary Shortcode Execution via REQUEST_URI via {url} Placeholder (CVSS 9.1)
• CVE-2026-7795 — Click to Chat <= 4.39 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'num' Shortcode Parameter (CVSS 6.4)
• CVE-2025-5336 — Click to Chat <= 4.22 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via data-no_number Parameter (CVSS 6.4)
• CVE-2024-3849 — Click to Chat – HoliThemes <= 3.35 - Authenticated (Contributor+) Local File Inclusion (CVSS 8.8)