Plugin icon

OneClick Chat to Order

oneclick-whatsapp-order

Vulnerabilities:

6

Last Updated:

May 26, 2026

Active Installs:

40000

Published
Title
Fixed in
CVSS
Published
2026-02-18
Title
OneClick Chat to Order < 1.1.0 - Missing Authorization to Authenticated (Editor+) Plugin Settings Update
Fixed in
Fixed in 1.1.0
CVSS
2.7 (low)
Published
2025-11-21
Title
OneClick Chat to Order < 1.0.9 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Exposure
Fixed in
Fixed in 1.0.9
CVSS
7.5 (high)
Published
2024-04-25
Title
OneClick Chat to Order < 1.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 1.0.6
CVSS
6.4 (medium)
Published
2024-01-08
Title
OneClick Chat to Order < 1.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Fixed in
Fixed in 1.0.6
CVSS
6.4 (medium)
Published
2023-11-07
Title
OneClick Chat to Order < 1.0.5 - Admin+ Stored XSS
Fixed in
Fixed in 1.0.5
CVSS
3.5 (low)
Published
2022-12-28
Title
OneClick Chat to Order < 1.0.4.2 - Contributor+ Stored XSS via Shortcode
Fixed in
Fixed in 1.0.4.2
CVSS
6.8 (medium)