WP Sticky Button – Click to Chat

WP Sticky Button – Click to Chat has 2 disclosed vulnerabilities in the WordSec catalog, all reported in 2022; all 2 are fixed as of September 2026. Their average CVSS score is 6.8, and the most serious one scores 7.2 out of 10. Severity breakdown: 0 critical and 1 high. 2022 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Scripting, behind 1 of the records (50%). Other recurring categories include Missing Authorization.

Every one of the 2 issues recorded for WP Sticky Button – Click to Chat has a vendor fix available, so running the current release closes all known holes.

All of these findings were reported by Krzysztof Zając. WP Sticky Button – Click to Chat is installed on roughly 10,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.8.8.

Strategic Overview

Avg CVSSMedium

6.8/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all WP Sticky Button – Click to Chat vulnerabilities before they are exploited.

Highest severity on recordCVSS 7.2

WP Sticky Button <= 1.3 - Unauthenticated Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

2 records


2022-08-01 00:00	WP Sticky Button <= 1.4 - Missing Authorization to Arbitrary Settings Update WP Sticky Button <= 1.4	`CVE-2022-2375`	6.3 Medium	Krzysztof Zając	Yes
2022-07-26 00:00	WP Sticky Button <= 1.3 - Unauthenticated Stored Cross-Site Scripting WP Sticky Button <= 1.3	`N/A`	7.2 High	Anonymous	Yes

Showing 1–2 of 2 reports

Latestv1.4.1

WP Sticky Button – Click to Chat

Author

farazify

3.4(5)

68/100

Last Updated

2025-08-14 (1y ago)

Active Installs

10,000+

Downloads

76,335

Requires WP

4.5+

Requires PHP

5.6+

Tested up to

WP 6.8.8

Created

2019-10-26 (7y ago)

WP Sticky Button is a Free & Light Weight WordPress plugin that displays the beautiful WhatsApp Sticky Button on the WordPress frontend. After clicking on the WhatsApp Sticky Button, It will bring you to the WhatsApp application or WhatsApp website. It will bring you to the WhatsApp application if WhatsApp application installed on your device It will bring you to the WhatsApp website if WhatsApp application is not installed on your device Admin Setting Panel WhatsApp Sticky Button – Settings Activate/Deactivate WhatsApp Sticky Button Customize “Display on” functionality for the Mobile, Tablet & Desktop Devices Change the Position of WhatsApp Sticky Button to Top-Left/Top-Right/Bottom-Left/Bottom-Right Add WhatsApp Number Add WhatsApp Default Message Customize Icon Width Customize Icon Height Customize Icon Margin Change Icon Type to Default WhatsApp Icon/Custom Icon Image Select Custom Icon Save & Enjoy!!!

View on WordPress.org