Pulsating Chat Button
Pulsating Chat Button has one disclosed vulnerability in the WordSec catalog, all reported in 2024; it is fixed as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10.
The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (100%).
The one issue recorded for Pulsating Chat Button has a vendor fix available, so running the current release closes it.
All of these findings were reported by SOPROBRO. Pulsating Chat Button is installed on roughly 3,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.
CVE-2024-11813Pulsating Chat Button <= 1.4.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Read the full analysisVulnerability Records

Pulsating Chat Button
Author
aminshah74
WhatsApp or Telegram Chat. Let’s make your Web page visitors contact you through “WhatsApp”, “WhatsApp Business” or “Telegram” with a single click (WhatsApp Chat, Group, Share). Adds a pulsating WhatsApp or Telegram button to your website. Fast and easy installation. Setting up target id Google Tag and YandexMetrics. Setting pre-filled Message. WhatsApp Chat Add ‘WhatsApp’, ‘WhatsApp Business’ or Telegram Number and let your website visitors contact you with a single click. Mobile: Navigate to WhatsApp Mobile App. Desktop: Navigate to the WhatsApp Desktop App or Web WhatsApp page (web.whatsapp.com) Plugin Features: Quick and effortless installation of a pulsating WhatsApp or Telegram button on your website. Integration of Google Analytics and Yandex.Metrica goal tracking for the button. Custom CSS support for easy customization and seamless integration with your website’s design. Enhance communication with your website visitors, providing them with a convenient way to reach out to you. Improve customer engagement and satisfaction by enabling instant messaging and quick response times. Increase conversion rates and drive more sales by offering a direct and efficient communication channel. Flexible positioning options to place the button in the desired location on your website. Compatible with various website platforms and responsive design for optimal user experience across devices. User-friendly interface and intuitive settings for easy configuration and management of the plugin. Regular updates and reliable support to ensure the plugin remains functional and up-to-date with the latest advancements. Multilingualism in the first text message for Whatsapp in accordance with the localization of the site language. Experience the benefits of this plugin and enhance your website’s communication capabilities with the pulsating WhatsApp or Telegram button.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C