PLUGIN SECURITY

Is Siteleads safe?

💬 Turns visitors into leads. Contact Widget, Free AI Chatbot, WhatsApp, Instagram, Facebook Messenger, Telegram, phone call, email, 14+ channels.

What this plugin does

  • Slug: siteleads
  • Author: Extend Themes
  • 10000+ active installs
  • 100/100 rating (2 reviews on wordpress.org)
  • 63162 all-time downloads
  • On WordPress.org since 2025-11-06

AI Chatbotchat buttoncontact widgetlead generationwhatsapp

Maintenance status

  • Latest known version: 1.1.7
  • Last updated: 2026-08-21 6:12am GMT
  • Tested up to WordPress: 7.1
  • Requires PHP: 7.2+
  • Max supported PHP (analyzed): <8.0

Known vulnerabilities

1 known CVE on file for Siteleads. Reported between 2026 and 2026.

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2026-78268 Lead Generation Contact Widget & AI Chatbot: Chat Button, Phone Call, Telegram, Email – SiteLeads [siteleads] < 1.2.1 Exposure of Sensitive System Information to an Unauthorized Control Sphere High 7.5 < 1.2.1 1.2.1 2026-08-24 ⚠ update needed

How to fix it

Keep Siteleads updated — 1.1.7 is the latest version on wordpress.org, and each CVE above lists the exact release that fixed it ("Fixed in").

This is the plugin's full known vulnerability history, not a scan of any specific installation — run a free scan of your own site to check your exact installed version.

Safer / more established alternatives

Check your own WordPress site

Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.