Holithemes vulnerabilities

Products

• Click To Chat – Holithemes 4

Newest

• holithemes click to chat – holithemes Click to Chat <= 4.44 - Unauthenticated Arbitrary Shortcode Execution via REQUEST_URI via {url} Placeholder CVE-2026-92097 9.1 CriticalOctober 14, 2026
• holithemes click to chat – holithemes Click to Chat <= 4.39 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'num' Shortcode Parameter CVE-2026-7795 6.4 MediumJune 6, 2026
• holithemes click to chat – holithemes Click to Chat <= 4.22 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via data-no_number Parameter CVE-2025-5336 6.4 MediumJune 14, 2025
• holithemes wp shapes WP SHAPES <= 1.0.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload CVE-2024-9619 6.4 MediumDecember 20, 2024
• holithemes click to chat – holithemes Click to Chat – HoliThemes <= 3.35 - Authenticated (Contributor+) Local File Inclusion CVE-2024-3849 8.8 HighMay 2, 2024
• holithemes click to chat Click to Chat < 3.18.1 - Contributor+ Stored XSS CVE-2022-4480 5.4 MediumJanuary 16, 2023