1R Chat Button Security & Risk Analysis

wordpress.org/plugins/1r-chat-button

Lightweight floating contact button for WordPress with email, phone, WhatsApp, Facebook Messenger, Viber, Telegram, WeChat, Line, Signal, VK, KakaoTal …

10 active installs v1.0.0 PHP 7.0+ WP 5.0+ Updated Apr 4, 2026
chat-buttoncontact-buttonfloating-buttonsocial-buttonswhatsapp
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Download
Safety Verdict

Is 1R Chat Button Safe to Use in 2026?

Generally Safe

Score 100/100

1R Chat Button has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 1mo ago
Risk Assessment

The 1r-chat-button v1.0.0 plugin exhibits a generally strong security posture based on the provided static analysis. It demonstrates excellent adherence to secure coding practices by not using any dangerous functions, performing all SQL queries using prepared statements, and properly escaping all output. Furthermore, there are no recorded vulnerabilities (CVEs) for this plugin, suggesting a history of secure development and maintenance. The limited attack surface, consisting of a single shortcode with no identified direct code vulnerabilities, further contributes to its positive security profile. The presence of a capability check is also a positive indicator of some level of access control.

Key Concerns

  • Missing nonce checks on shortcodes
  • No Taint Analysis Data Available
Vulnerabilities
None known

1R Chat Button Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

1R Chat Button Release Timeline

v1.0.0Current
Code Analysis
Analyzed Apr 16, 2026

1R Chat Button Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
0
121 escaped
Nonce Checks
0
Capability Checks
1
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

100% escaped121 total outputs
Attack Surface

1R Chat Button Attack Surface

Entry Points1
Unprotected0

Shortcodes 1

[r1_chat_button] includes/frontend.php:633
WordPress Hooks 8
actionplugins_loaded1r-chat-button.php:32
actionadmin_menuadmin/admin-menu.php:17
actionadmin_enqueue_scriptsadmin/admin-menu.php:48
actionadmin_menuadmin/settings.php:18
actionadmin_enqueue_scriptsadmin/settings.php:49
actionadmin_initadmin/settings.php:499
actionwp_enqueue_scriptsincludes/frontend.php:352
actionwp_footerincludes/frontend.php:524
Maintenance & Trust

1R Chat Button Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedApr 4, 2026
PHP min version7.0
Downloads95

Community Trust

Rating0/100
Number of ratings0
Active installs10
Developer Profile

1R Chat Button Developer Profile

1R Soft

1 plugin · 10 total installs

94
trust score
Avg Security Score
100/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect 1R Chat Button

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/1r-chat-button/assets/css/admin.css/wp-content/plugins/1r-chat-button/assets/js/admin-sortable.js
Script Paths
/wp-content/plugins/1r-chat-button/assets/js/admin-sortable.js
Version Parameters
1r-chat-button/assets/css/admin.css?ver=1r-chat-button/assets/js/admin-sortable.js?ver=

HTML / DOM Fingerprints

CSS Classes
r1-chat-button-cardr1-chat-button-card-rowr1-chat-toggler1-chat-toggle-uir1-chat-card-namer1-chat-card-input-wrapr1-chat-card-actionsr1-chat-card-handle+1 more
Data Attributes
data-buttondata-default-color
FAQ

Frequently Asked Questions about 1R Chat Button