Pulsating Chat Button

Pulsating Chat Button has one disclosed vulnerability in the WordSec catalog, all reported in 2024; it is fixed as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (100%).

The one issue recorded for Pulsating Chat Button has a vendor fix available, so running the current release closes it.

All of these findings were reported by SOPROBRO. Pulsating Chat Button is installed on roughly 3,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.

Strategic Overview

Avg CVSSMedium
6.1/ 10
Patch Coverage100%
Open

0

Fixed

1

Get automatic notifications for all Pulsating Chat Button vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.1CVE-2024-11813

Pulsating Chat Button <= 1.4.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records
Pulsating Chat Button banner
Latestv1.5.10

Pulsating Chat Button

aminshah74

Author

aminshah74

5.0(1)
100/100
Last Updated
2026-08-14 (1mo ago)
Active Installs
3,000+
Downloads
17,461
Requires WP
5.6+
Requires PHP
7.0+
Tested up to
WP 7.1
Created
2023-06-13 (3y ago)

WhatsApp or Telegram Chat. Let’s make your Web page visitors contact you through “WhatsApp”, “WhatsApp Business” or “Telegram” with a single click (WhatsApp Chat, Group, Share). Adds a pulsating WhatsApp or Telegram button to your website. Fast and easy installation. Setting up target id Google Tag and YandexMetrics. Setting pre-filled Message. WhatsApp Chat Add &#8216;WhatsApp’, &#8216;WhatsApp Business’ or Telegram Number and let your website visitors contact you with a single click. Mobile: Navigate to WhatsApp Mobile App. Desktop: Navigate to the WhatsApp Desktop App or Web WhatsApp page (web.whatsapp.com) Plugin Features: Quick and effortless installation of a pulsating WhatsApp or Telegram button on your website. Integration of Google Analytics and Yandex.Metrica goal tracking for the button. Custom CSS support for easy customization and seamless integration with your website’s design. Enhance communication with your website visitors, providing them with a convenient way to reach out to you. Improve customer engagement and satisfaction by enabling instant messaging and quick response times. Increase conversion rates and drive more sales by offering a direct and efficient communication channel. Flexible positioning options to place the button in the desired location on your website. Compatible with various website platforms and responsive design for optimal user experience across devices. User-friendly interface and intuitive settings for easy configuration and management of the plugin. Regular updates and reliable support to ensure the plugin remains functional and up-to-date with the latest advancements. Multilingualism in the first text message for Whatsapp in accordance with the localization of the site language. Experience the benefits of this plugin and enhance your website’s communication capabilities with the pulsating WhatsApp or Telegram button.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C