TextP2P Texting Widget

TextP2P Texting Widget has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it is fixed as of August 2026. Their average CVSS score is 4.3, and the most serious one scores 4.3 out of 10.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (100%).

The one issue recorded for TextP2P Texting Widget has a vendor fix available, so running the current release closes it.

All of these findings were reported by afnaan. TextP2P Texting Widget is installed on roughly 20 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.

Strategic Overview

Avg CVSSMedium
4.3/ 10
Patch Coverage100%
Open

0

Fixed

1

Get automatic notifications for all TextP2P Texting Widget vulnerabilities before they are exploited.

Highest severity on recordCVSS 4.3CVE-2026-4133

TextP2P Texting Widget <= 1.8 - Cross-Site Request Forgery to Settings Update

Read the full analysis

Vulnerability Records

1 records
TextP2P Texting Widget banner
Latestv1.9

TextP2P Texting Widget

Greg Armfield

Author

Greg Armfield

5.0(1)
100/100
Last Updated
2026-05-25 (3mo ago)
Active Installs
20+
Downloads
2,689
Requires WP
4.0+
Requires PHP
0+
Tested up to
WP 7.0.4
Created
2019-10-18 (7y ago)

Allow site visitors to contact your business the way most prefer, by Texting. Installing the TextP2P Texting Widget plugin into your WordPress site provides an icon people can click on to immediately text you. All contact information including name, email, and mobile number will be captured and stored in TextP2P’s cloud based web application. The plugin also supports google captcha v2 and v3. All incoming texts can be accessed from our website, mobile app, or automatically forwarded to your cell phone. You will receive an email or mobile app notification for any new messages. You can also easily set up automated text responses, drip campaigns or respond manually to each text message using TextP2P knowing that text messages have a 98% open rate! WHAT IS TEXTP2P AND WHY DO YOU NEED IT? TextP2P combines Text messaging, Email, and Ringless Voicemail drops into one affordable and easy to use online application. Thousands of small to mid-sized businesses in the US & Canada have used our services to communicate with their customers, getting a 98% open rate in under 3 minutes! Save time with our automation features including drip campaigns, keyword signups, automated responses, in-text surveys, and more. Differentiators of TextP2P include: TextP2P offers bulk texting with personalization TextP2P offers bulk ringless voicemail drops TextP2P offers bulk email marketing TextP2P offers keywords for signing up new leads TextP2P offers MMS messaging with up to 1600 characters TextP2P offers integrations with leading email, CRM, and thousands of other applications through Zapier TextP2P offers workflow automations where they can get a drip campaign every day, every month, or every year TextP2P offers a mini-CRM where you can store notes, tags, or custom fields about a customer TextP2P offers in-text rich multiple choice surveys. TEXTP2P SIGN UP AND FREE TRIAL Along with our free texting plugin you will need an account with TextP2P. You can sign up completely for free for 14 days and receive 100 free text credits good for 100 SMS text messages. All incoming texts are free so you only pay for outgoing text messages. A valid credit card is required to start your free trial, and you can always cancel at any time Once your trial is over, you will start your subscription to our Starter Package which costs just $21/month and gives you 500 text credits. If you don’t need 500 texts a month, we have a pay as you go plan for $5/month and text credits are extra. Note: TextP2P’s texting service is only available in the US & Canada. Important Notice If you are using WordPress caching, please be sure to clear it. Click here for instructions Support Email us at support@textp2p.com Helpful Links: Support: https://textp2p.com/support-ticket Contact Us: https://textp2p.com/contact-us

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C