Input validation vulnerability in Click to Chat – HoliThemes 3.35

The Click to Chat – HoliThemes plugin for WordPress has a security issue that affects all versions up to 3.35. This vulnerability, known as Local File Inclusion, allows attackers with contributor access or higher to access and run any files they want on the server. This means they can run any code written in those files, which could bypass security measures, access confidential information, or even cause the website to execute malicious code. This is especially dangerous because it can happen even if the attacker uploads seemingly harmless files like images.