WordPress plugin
Social Chat – Click To Chat App Button security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 2 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High0
- Medium2
- Low0
All Social Chat – Click To Chat App Button vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium6.4 | Authenticated (Contributor+) Stored Cross-Site Scripting via 'consent_message' JSON Attribute in .qlwapp data-box ≤8.6.2Update to 8.6.3 | CVE-2026-18404 | |
| Medium5.5 | Administrator+ Stored Cross-Site Scripting ≤6.0.4Update to 6.0.5 | CVE-2022-2361 |
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via 'consent_message' JSON Attribute in .qlwapp data-box
≤8.6.2Update to 8.6.3
- Medium5.5Administrator+ Stored Cross-Site Scripting
≤6.0.4Update to 6.0.5
Social Chat – Click To Chat App Button: common questions
Does Social Chat – Click To Chat App Button have known vulnerabilities?
Yes. VulnCrest Radar lists 2 known vulnerabilities in Social Chat – Click To Chat App Button: 2 medium. None are known to affect version null.
How do I check which version of Social Chat – Click To Chat App Button I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Social Chat – Click To Chat App Button vulnerability?
CVE-2026-18404, published Sep 4, 2026: Social Chat <= 8.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'consent_message' JSON Attribute in .qlwapp data-box. Severity: Medium (CVSS 6.4).
Is any Social Chat – Click To Chat App Button vulnerability listed in CISA KEV?
No. None of the known Social Chat – Click To Chat App Button vulnerabilities is currently listed in the CISA KEV catalog.