Website Chat Button: Kommo integration
Website Chat Button: Kommo integration has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it remains unpatched as of September 2026. Their average CVSS score is 5.4, and the most serious one scores 5.4 out of 10.
The most common weakness is Missing Authorization, behind 1 of the records (100%).
The one issue recorded for Website Chat Button: Kommo integration has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.
All of these findings were reported by Peter Thaleikis. Website Chat Button: Kommo integration is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.8.8.
CVE-2025-58666Website Chat Button: Kommo integration <= 1.3.1 - Missing Authorization
Read the full analysisVulnerability Records

Website Chat Button: Kommo integration
Author
Kommo
Website Chat Button: Kommo integration WordPress plugin provide access to unified inbox via button. Use this plugin you agree to our Terms of Service and Privacy Policy Kommo’s website chat button provides a convenient way for visitors to contact businesses using their preferred messaging app. Thanks to our seamless WordPress integration, visitors can directly reach out from the website to ask questions or share feedback. All conversations land in Kommo’s unified inbox, making it effortless to manage and respond to them in no time. To enhance the chat button experience, you can go a step further by adding a welcoming message, chatbots, and templates for automated replies. You also have the flexibility to customize the style to align with your brand’s unique identity perfectly. The setup process is straightforward, ensuring a smooth connection between businesses and customers across popular messaging platforms. Requirements The WordPress Website Chat Button Plugin by Kommo is free, but you need to be a Kommo customer. Kommo comes with a 14-day trial. No credit card is needed. Take a look at the Kommo plans and features on our website. Documentation and Support For documentation and tutorials go to our Knowledge base.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C