Click n Chat (Chat Widget Integration)
Click n Chat (Chat Widget Integration) has 3 disclosed vulnerabilities in the WordSec catalog, all reported in 2026; all 3 are fixed as of October 2026. Their average CVSS score is 6.8, and the most serious one scores 7.5 out of 10. Severity breakdown: 0 critical and 2 high. 2026 was the busiest year with 3 disclosures.
The most common weakness is SQL Injection, behind 2 of the records (67%). Other recurring categories include Exposure Of Sensitive Information To An Unauthorized Actor.
Every one of the 3 issues recorded for Click n Chat (Chat Widget Integration) has a vendor fix available, so running the current release closes all known holes.
3 independent researchers contributed these findings, one record each. Click n Chat (Chat Widget Integration) is installed on roughly 30 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.3.
CVE-2026-92997Click n Chat <= 1.1.2 - Unauthenticated SQL Injection
Read the full analysisVulnerability Records
Click n Chat (Chat Widget Integration)
Author
Adeel Abbasi
Click n Chat is a 100% FREE WordPress chat widget plugin that allows you to connect with your website visitors through popular messaging and social platforms using a floating chat button. With Click n Chat, you can add WhatsApp chat, Telegram chat, Facebook Messenger, Instagram, Email, SMS, and many other platforms to your website — all in one lightweight and customizable chat widget. The plugin includes smart auto-replies, availability scheduling, drag-and-drop profile management, and Google Analytics tracking to help you engage visitors and improve communication without any subscriptions or hidden costs. 🔹 Key Benefits Fully FREE – no Pro version, no paid upgrades Floating chat widget for instant communication Supports multiple social and messaging platforms Smart auto-reply chatbot functionality Easy customization with no coding required Mobile-friendly and responsive Google Analytics (GA4 & Universal) support Features 1. Multi-Platform Chat Support Connect your visitors using their preferred platform: – WhatsApp – Telegram – Facebook Messenger – Instagram – Skype – Snapchat – Viber – Line – Email – SMS – Google Maps – TikTok – Slack – LinkedIn – VK 2. AI-Powered Chatbot (Multi-Provider) Enhance conversations using modern AI providers Supported AI Providers OpenAI (ChatGPT) Claude (Anthropic) Google Gemini HuggingFace Inference API Cohere DeepSeek Key Highlights Switch AI providers anytime from settings Only required API fields appear dynamically Unified AI engine (single backend class) HTML-formatted AI responses for clean chat display Compatible with PHP 7.4+ 3. Social User Profile Management Create multiple chat profiles Set agent name, role, and description Enable or disable profiles anytime Drag & drop profile sorting Set availability times per weekday Choose custom icons for each platform 4. Floating Chat Widget Clean bottom-right popup chat button Displays all active chat platforms Opens chat instantly with pre-filled details Non-intrusive and fast loading 5. Auto-Reply Chatbot Keyword and query-based auto replies Percentage-based matching for accuracy Works even when agents are offline Fully customizable responses 6. Design & Customization Popup header text and colors Padding, borders, and icons Pre-defined widget styles Custom greeting message 7. Google Analytics Integration Track chat widget clicks Supports GA4 and Universal Analytics Measure user engagement easily 8. Responsive & Developer-Friendly Works on desktop, tablet, and mobile Cross-browser compatible Lightweight and optimized Hooks and filters for developers
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C