Click to Chat - HoliThemes
Healthy: vulnerability published 13 Oct 2026, fixed in 4.45.
| Ownership | 100 |
|---|---|
| Maintenance | 100 |
| Security | 80 |
| Support | 70 |
| Reputation | 70 |
Active signals
Facts we detected, with links to the source.
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
| bhvreddy | 23 Oct 2017 to 30 Oct 2026, 335 commits |
|---|
1 committer recorded. No ownership changes recorded since 3 Nov 2026.
Maintenance
- Last release
- 5 days ago
- Releases, 24 months
- 43
- Tested up to
- 7.1 current
- Requires PHP
- 5.6 supported 8.2+
| Q1 2024 | 0 |
|---|---|
| Q2 2024 | 2 |
| Q3 2024 | 24 |
| Q4 2024 | 3 |
| Q1 2025 | 0 |
| Q2 2025 | 0 |
| Q3 2025 | 13 |
| Q4 2025 | 4 |
| Q1 2026 | 16 |
| Q2 2026 | 1 |
| Q3 2026 | 6 |
| Q4 2026 | 1 |
Last release 30 Oct 2026. Tested with WordPress 7.1 (current).
Support
100% of 2 support threads resolved in the last 2 months.
Security record
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 13 Oct 2026 | Click to Chat <= 4.44 - Unauthenticated Arbitrary Shortcode Execution via REQUEST_URI via {url} Placeholder | 9.1 | <= 4.44 | 4.45 | 0 |
| 5 Jun 2026 | Click to Chat <= 4.39 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'num' Shortcode Parameter | 6.4 | <= 4.39 | 4.40 | 0 |
| 13 Jun 2025 | Click to Chat <= 4.22 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via data-no_number Parameter | 6.4 | <= 4.22 | 4.23 | 219 |
| 17 Apr 2024 | Click to Chat – HoliThemes <= 3.35 - Authenticated (Contributor+) Local File Inclusion | 8.8 | <= 3.35 | 4.0 | 0 |
| 21 Dec 2022 | Click to Chat <= 3.18 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode | 6.4 | <= 3.18 | 3.18.1 | 135 |
Source: Wordfence Intelligence.
Reputation
| Q2 2024 | 5.0 |
|---|---|
| Q3 2024 | 5.0 |
| Q1 2025 | 3.0 |
| Q2 2025 | 5.0 |
| Q3 2025 | 5.0 |
| Q4 2025 | 4.0 |
Average rating fell from 5.0 to 4.0 between Q2 2024 and Q4 2025.
| 5 star | 122 |
|---|---|
| 4 star | 2 |
| 3 star | 3 |
| 2 star | 2 |
| 1 star | 2 |
- Site hacked · 1 star · 18 Mar 2025
Momentum
600,000+ active installs. History builds with each weekly snapshot.
| 4 May 2026 | 10,270 |
|---|---|
| 11 May 2026 | 18,812 |
| 18 May 2026 | 29,603 |
| 25 May 2026 | 16,488 |
| 1 Jun 2026 | 173,233 |
| 8 Jun 2026 | 39,613 |
| 15 Jun 2026 | 28,154 |
| 22 Jun 2026 | 22,187 |
| 29 Jun 2026 | 20,284 |
| 6 Jul 2026 | 66,665 |
| 13 Jul 2026 | 146,938 |
| 20 Jul 2026 | 31,443 |
| 27 Jul 2026 | 208,721 |
| 3 Aug 2026 | 54,671 |
| 10 Aug 2026 | 26,432 |
| 17 Aug 2026 | 179,724 |
| 24 Aug 2026 | 33,032 |
| 31 Aug 2026 | 26,654 |
| 7 Sep 2026 | 159,928 |
| 14 Sep 2026 | 45,257 |
| 21 Sep 2026 | 32,521 |
| 28 Sep 2026 | 155,998 |
| 5 Oct 2026 | 46,049 |
| 12 Oct 2026 | 33,248 |
| 19 Oct 2026 | 24,744 |
| 26 Oct 2026 | 137,898 |
| 2 Nov 2026 | 10,294 |
Weekly downloads over the last 4 weeks are 22% below the 27-week average.
Healthier alternatives
Same category, higher Canary Score. Never sponsored.
Facts
| Version | 4.46 |
|---|---|
| Author | HoliThemes |
| Added | 23 Oct 2017 |
| Last updated | 30 Oct 2026 |
| Active installs | 600,000+ |
| Requires WordPress | 6.6 |
| Tested up to | 7.1.4 |
| Requires PHP | 5.6 |
| Category | E-commerce & Shopping |
| Tags | whatsapp, click to chat, whatsapp chat, whatsapp business, woocommerce whatsapp |
Questions
Is Click to Chat - HoliThemes still maintained?
Click to Chat - HoliThemes was last updated on 30 Oct 2026. Its Canary status is Healthy.
Is Click to Chat - HoliThemes safe?
Click to Chat - HoliThemes has no open unpatched vulnerabilities on record. 3 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.
Who owns Click to Chat - HoliThemes?
The wordpress.org author is HoliThemes. Recent committers: bhvreddy, holithemes, plugin-master. We have recorded no ownership change.
What can I use instead of Click to Chat - HoliThemes?
Plugins in the same category with a higher Canary Score: Chatway Live Chat - AI Chatbot, Customer Support, FAQ & Helpdesk Customer Service & Chat Buttons, Buttonizer - Floating Menus, Sticky Buttons, & Popup Builder, WP Chat App, Buttonizer - Live Chat, AI Chatbot, Call, Chat, Contact Button, Simple Chat Button.