PLUGIN SECURITY
Is Sticky Chat Widget safe?
Social chat buttons with WhatsApp, Messenger, WeChat, Telegram, Instagram, TikTok, Zalo & more — plus SMS, Call button, Contact form, and 20+ icons.
What this plugin does
- Slug:
sticky-chat-widget - Author: gingerplugins
- 10000+ active installs
- 100/100 rating (39 reviews on wordpress.org)
- 104709 all-time downloads
- On WordPress.org since 2020-03-19
chat buttonchat widgetcontact formfacebook messengerwhatsapp widget
Maintenance status
- Latest known version: 1.4.2
- Last updated: 2026-08-10 10:58am GMT
- Tested up to WordPress: 7.0.4
- Requires PHP: 5.4+
- Max supported PHP (analyzed): 8.4
Known vulnerabilities
2 known CVEs on file for Sticky Chat Widget. Reported between 2023 and 2023.
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2023-51361 | Sticky Chat Widget – Floating Chat Icons, Contact Form, Call, Click to Chat, Email & Message Buttons [sticky-chat-widget] < 1.1.9 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 5.9 | < 1.1.9 | 1.1.9 | 2023-12-26 | ✓ fixed in latest |
| CVE-2026-73187 | Sticky Chat Widget – Floating Chat Icons, Contact Form, Call, Click to Chat, Email & Message Buttons [sticky-chat-widget] < 1.4.3 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') | Critical 9.3 | < 1.4.3 | 1.4.3 | 2023-12-26 | ⚠ update needed |
How to fix it
Keep Sticky Chat Widget updated — 1.4.2 is the latest version on wordpress.org, and each CVE above lists the exact release that fixed it ("Fixed in").
This is the plugin's full known vulnerability history, not a scan of any specific installation — run a free scan of your own site to check your exact installed version.
Safer / more established alternatives
- Floating Chat Widget: Contact Chat Icons, Telegram Chat, Line Messenger, WeChat, Email, SMS, Call Button – Chaty — 300000+ active installs — 100/100 (1240) — max PHP 8.4
- Tawk.To Live Chat — 100000+ active installs — 92/100 (142)
- Chat Button & Custom ChatGPT-Powered Bot by GetButton.io — 20000+ active installs — 90/100 (175) — max PHP 8.4
- LeadConnector — 20000+ active installs — 46/100 (11) — max PHP 8.4
- Lead Generation Contact Widget & AI Chatbot: Chat Button, Phone Call, Telegram, Email – SiteLeads — 10000+ active installs — 100/100 (2) — max PHP <8.0
Check your own WordPress site
Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.