Plugin icon

Floating Chat Widget: Contact Chat Icons, Telegram Chat, Line Messenger, WeChat, Email, SMS, Call Button – Chaty

chaty

Vulnerabilities:

10

Last Updated:

January 7, 2026

Active Installs:

400000

Published
Title
Fixed in
CVSS
Published
2025-02-26
Title
Floating Chat Widget: Contact Chat Icons, Telegram Chat, Line Messenger, WeChat, Email, SMS, Call Button, WhatsApp – Chaty < 3.3.6 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting
Fixed in
Fixed in 3.3.6
CVSS
6.4 (medium)
Published
2024-05-23
Title
Floating Chat Widget < 3.2.3 - Admin+ Stored XSS
Fixed in
Fixed in 3.2.3
CVSS
3.5 (low)
Published
2024-04-03
Title
Floating Chat Widget < 3.1.9 - Editor+ Stored XSS
Fixed in
Fixed in 3.1.9
CVSS
3.5 (low)
Published
2023-11-13
Title
Chaty < 3.1.3 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings
Fixed in
Fixed in 3.1.3
CVSS
4.4 (medium)
Published
2023-06-26
Title
Floating Chat Widget < 3.1.2 - Admin+ Stored Cross-Site Scripting
Fixed in
Fixed in 3.1.2
CVSS
3.5 (low)
Published
2023-05-16
Title
Chaty < 3.1 - Admin+ Stored Cross-Site Scripting
Fixed in
Fixed in 3.1
CVSS
3.5 (low)
Published
2023-05-16
Title
Chaty < 3.1 - Reflected XSS
Fixed in
Fixed in 3.1
CVSS
7.1 (high)
Published
2022-11-14
Title
Chaty < 3.0.3 - Admin+ SQLi
Fixed in
Fixed in 3.0.3
CVSS
6.8 (medium)
Published
2022-04-08
Title
Floating Chat Widget < 2.8.4 - Admin+ Stored Cross-Site Scripting
Fixed in
Fixed in 2.8.4
CVSS
4.8 (medium)
Published
2021-12-06
Title
Chaty Free < 2.8.3 & Pro < 2.8.2 - Reflected Cross-Site Scripting
Fixed in
Fixed in 2.8.3
CVSS
7.5 (high)