Known vulnerabilities in OneClick Chat to Order

Transform your WooCommerce store with seamless WhatsApp integration. Enable customers to order products instantly via WhatsApp with enhanced features.

4Reported vulnerabilities

7.5Highest CVSS score

1.1.2Latest version

40,000+Active installs

What to do now

Update OneClick Chat to Order to 1.0.9 or later. 4 of these have a fixed version available. Updating resolves them.

Plugin last updated: May 26, 2026 / Tested up to WordPress: 7.0.4 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVE	Severity	Exploit probability next 30 days	Affected versions	Fixed in	Published
CVE-2025-13526	High 7.5	0.4%	0 to 1.0.8 (inclusive)	`1.0.9`	November 22, 2025
CVE-2024-29789	Medium 6.4	0.4%	1.0.5 and earlier	`1.0.6`	March 25, 2024
WF-3e4aaf2e-a0c6-47d2-9eb8-d65952a74424	Medium 6.4	—	1.0.5 and earlier	`1.0.6`	January 8, 2024
CVE-2023-47546	Medium 4.4	0.4%	1.0.4.2 and earlier	`1.0.5`	November 7, 2023

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.