holithemes Click to Chat – HoliThemes

• CVE-2026-92097 Critical 9.1 Click to Chat <= 4.44 - Unauthenticated Arbitrary Shortcode Execution via REQUEST_URI via {url} Placeholder 0.5%
• CVE-2026-7795 Medium 6.4 Click to Chat <= 4.39 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'num' Shortcode Parameter 0.4%
• CVE-2025-5336 Medium 6.4 Click to Chat <= 4.22 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via data-no_number Parameter 0.3%
• CVE-2024-3849 High 8.8 Click to Chat – HoliThemes <= 3.35 - Authenticated (Contributor+) Local File Inclusion 1.7%