Site Chat on Telegram
Site Chat on Telegram has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it is fixed as of September 2026. Their average CVSS score is 8.1, and the most serious one scores 8.1 out of 10. Severity breakdown: 0 critical and 1 high.
The most common weakness is Deserialization Of Untrusted Data, behind 1 of the records (100%).
The one issue recorded for Site Chat on Telegram has a vendor fix available, so running the current release closes it.
All of these findings were reported by Drew Webber (mcdruid). Site Chat on Telegram is installed on roughly 90 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.
CVE-2025-30949Site Chat on Telegram <= 1.0.4 - Unauthenticated PHP Object Injection
Read the full analysisVulnerability Records

Site Chat on Telegram
Author
Guru Team
Site Chat on Telegram is a powerful and convenient WordPress plugin that allows you to integrate a support chat on your website with Telegram. With this plugin, your customers can easily send messages through the chat widget on your site, and administrators and support staff can quickly and efficiently respond to them directly in Telegram. New Feature: AI Integration with OpenAI We’ve added a powerful new feature to our WordPress support chat plugin! Now you can integrate OpenAI into your Telegram support workflow: Custom System Prompt – Define how the AI should respond by adding your own system prompt. Content-Aware Responses – Select specific posts from your site to provide the AI with context when answering. Seamless Human Handoff – Easily switch the chat from AI to a human admin whenever needed. Unified Workflow – Customers write in the website chat, messages are sent to Telegram, and now the AI can assist with instant replies. This gives you a flexible way to combine human support with AI-powered assistance, improving response time and customer experience. Key Features Instant Notifications: Receive notifications of new chat messages on your website directly in Telegram. AI Integration with OpenAI: automated replies using custom system prompts and selected WordPress posts, with the option to hand over the chat to a human. Easy Integration: Installing and configuring the plugin takes just a few minutes. User-Friendly Interface: Intuitive interface for configuring and managing the chat. Flexible customisation of the widget display: Specify the pages and post types where the support chat should be displayed. Automatic response at the first request: Automatic response to the first user query, ensuring quicker engagement and a better user experience. Customization Options: Personalize the chat widget with your own colors, manager’s avatar, and welcome message. Working hours: Specify the days and hours when you are available to respond to clients. Security: All messages are transmitted using a secure connection. Auto-replies: Add a list of keywords, and when a match is found, the user will receive an automatic message. How It Works Install and activate the Site Chat on Telegram plugin on your WordPress site. Set up the integration with your Telegram account by following simple instructions. Customize the chat widget by selecting your own colors, manager’s avatar, and welcome message. Select where the plugin will be active (entire site, post types, taxonomies, specific posts, etc.) Start receiving and responding to customer messages in real-time directly from Telegram. Benefits of Use Improved Customer Support: Quick responses to customer inquiries will enhance their satisfaction. Reduced Response Time: Instant notifications and the ability to reply from anywhere via Telegram. Increased Efficiency: Centralized management of customer messages. Demo | Documentation Try Site Chat on Telegram today and enhance your customer interactions!
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C