Lead Generation Contact Widget & AI Chatbot: Chat Button, Phone Call, Telegram, Email – SiteLeads
Lead Generation Contact Widget & AI Chatbot: Chat Button, Phone Call, Telegram, Email – SiteLeads has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it is fixed as of September 2026. Their average CVSS score is 5.3, and the most serious one scores 5.3 out of 10.
The most common weakness is Exposure Of Sensitive Information To An Unauthorized Actor, behind 1 of the records (100%).
The one issue recorded for Lead Generation Contact Widget & AI Chatbot: Chat Button, Phone Call, Telegram, Email – SiteLeads has a vendor fix available, so running the current release closes it.
All of these findings were reported by LevinityCyber. Lead Generation Contact Widget & AI Chatbot: Chat Button, Phone Call, Telegram, Email – SiteLeads is installed on roughly 10,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.
CVE-2026-78268Lead Generation Contact Widget & AI Chatbot: Chat Button, Phone Call, Telegram, Email – SiteLeads <= 1.2.0 - Unauthenticated Information Exposure
Read the full analysisVulnerability Records

Lead Generation Contact Widget & AI Chatbot: Chat Button, Phone Call, Telegram, Email – SiteLeads
Author
Extend Themes
Turn your WordPress website into a 24/7 lead generation machine — without missing a single visitor. SiteLeads is a lead generation contact widget built for small businesses. Most plugins just add buttons to your site. SiteLeads goes further: it combines every channel your customers already use — WhatsApp, phone, email, Messenger, Telegram, Instagram — with a free AI chatbot that starts conversations, qualifies visitors, and collects their contact information automatically. Even while you sleep. SiteLeads Premium → | See all features 💬 Contact Widget — All Your Channels in One Place Add a floating contact widget to your site with every channel your visitors already use. One click takes them straight to WhatsApp, your phone, email, Messenger, Telegram, Instagram DM, SMS, TikTok, X/Twitter, WeChat, Snapchat, Discord, Google Maps, and more. Visitors choose how they want to reach you. You never miss a contact. Free plan includes: * Floating contact widget * All standard communication channels * WhatsApp, phone, email, Messenger, Telegram, Instagram, SMS, TikTok, WeChat, Snapchat, Discord, Google Maps, X/Twitter * Widget icon customization — color, size, position, shadow, border * Basic display triggers * Simple text greeting * Mobile and desktop display 🤖 Free AI Chatbot for Lead Generation — On Autopilot, 24/7 Add a free AI chatbot to your contact widget. It reads your website, learns your content, and engages visitors automatically — answering questions, qualifying interest, and collecting names and email addresses while you focus on running your business. The AI chatbot is free and optional. Add it in minutes. No coding required. Free plan includes: * 1 AI chatbot * Knowledge base built from up to 30 pages of your website * Up to 2 uploaded training files (PDF, DOCX) * Basic conversation settings: name, greeting, tone * Leads section and Messages section How it works: 1. Give your AI chatbot a name and your website URL 2. It crawls your pages and builds its knowledge base 3. Visitors start a conversation — the AI chatbot engages them, answers questions, and collects their contact info 4. Leads appear in your WordPress dashboard automatically 🔥 Pro: Multi-Channel Widget & WhatsApp Management Widgets & Channels * Unlimited active widgets * Multiple contacts per channel — with avatar, role, and availability schedule * Rich greeting cards: narrow, vertical, horizontal, circle card formats * Attention effects: pulse, shake, glow animations & more * Mobile-specific layouts: CTA bar, Channels bar * Custom channel icons 🎯 Pro: AI Lead Generation & Visitor Qualification AI chatbot (Pro) * Unlimited AI chatbots — specialized per page, product, or service * Full website crawl beyond 30 pages * Unlimited file uploads — PDFs, manuals, internal docs, price lists * Strict FAQ Mode — respond only from your approved training sources * Larger knowledge base character limit 📈 Pro: Targeting, Analytics & Full Brand Control Targeting & Display * Page targeting — show specific widgets on specific URLs, categories, or post types * Date scheduling — run campaigns, promotions, or seasonal widgets * Day & time scheduling — show only during business hours * Traffic source targeting — Google Ads, social, organic, direct * Geographic targeting — country, state, city * Smart triggers: exit intent, scroll percentage Analytics (Pro only) * Full analytics dashboard * Channel performance tracking * AI chatbot conversion metrics Brand & Limits * Full brand customization * Unlimited monthly leads and messages 📊 How Each Channel Works WhatsApp — Add your number. Visitors click and open a WhatsApp chat directly — mobile app on mobile, WhatsApp Web on desktop. WhatsApp Business is supported. Phone — Click to call. One tap on mobile dials your number directly. Email — Opens the visitor’s email client with your address pre-filled. Messenger — Links to your Facebook business page chat. Telegram — Opens a direct Telegram conversation with your account. Instagram — Links to your Instagram DM. SMS — Opens an SMS message on mobile devices. Google Maps — Links to your business location — ideal for local businesses. WhatsApp, Messenger, Telegram, phone, email, SMS, TikTok, WeChat, Snapchat, Discord, X/Twitter, Google Maps — all available in the free plan. 🎯 Display Triggers & Targeting Control exactly when and where your widget appears: Time delay — show after X seconds on page Scroll percentage — show after the visitor scrolls a set distance (Pro) Exit intent — show when the visitor moves to leave (Pro) Page targeting — show on specific pages, categories, or post types (Pro) Geographic targeting — show only to visitors in selected countries, states, or cities (Pro) Traffic source targeting — show only to visitors from Google Ads, social, organic, or direct (Pro) Day & time scheduling — restrict to business hours (Pro) Date scheduling — activate for campaigns or promotions (Pro) 🏢 Built by Extend Studio SiteLeads is built by Extend Studio — a WordPress development company building products since 2015. Also behind Kubio, Colibri, and Mesmerize, with 270,000+ active installations across our plugin portfolio. That track record means SiteLeads is built to last: actively maintained, regularly updated, and backed by a team that has been shipping WordPress plugins for over a decade. ✅ Getting Started — Under 5 Minutes Install and activate SiteLeads from the WordPress Plugins dashboard Choose your channels — add your WhatsApp number, phone, email, or other contact details Customize the widget position, colors, and greeting Optionally: add the free AI chatbot, point it at your website URL, and let it learn your content Your widget goes live immediately — no code required Source Files 📂 GitHub Repository External Services This plugin connects to the SiteLeads Cloud Platform to enable the AI chatbot and lead management features. SiteLeads Cloud (cloud.siteleads.ai) The plugin connects to cloud.siteleads.ai to enable AI chatbot functionality, manage knowledge bases (website crawling and document processing), and store captured leads. Privacy Policy Terms of Service These connections are only active if the AI chatbot is enabled and a SiteLeads account has been created. The basic contact widget operates independently.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C