Melu Managed Live Chat Security & Risk Analysis

wordpress.org/plugins/melu-live-chat

Melu is a managed live chat service that provides live chat software via this plugin, and highly trained professional operators that look after it for …

100 active installs v2.2 PHP + WP 4.8+ Updated Dec 17, 2025
chat-widgethuman-operated-live-chatlive-chatlivechatmanaged-live-chat
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Melu Managed Live Chat Safe to Use in 2026?

Generally Safe

Score 100/100

Melu Managed Live Chat has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 3mo ago
Risk Assessment

The melu-live-chat plugin version 2.2 exhibits a generally strong security posture based on the provided static analysis. It demonstrates good practices by having no known vulnerabilities (CVEs) and no complex attack surface with AJAX handlers, REST API routes, shortcodes, or cron events. The code signals also indicate a positive trend, with 100% of SQL queries using prepared statements and a single nonce check and capability check present. This suggests a conscious effort to prevent common web application vulnerabilities.

Key Concerns

  • Low output escaping effectiveness
  • Flows with unsanitized paths
Vulnerabilities
None known

Melu Managed Live Chat Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

Melu Managed Live Chat Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
1 prepared
Unescaped Output
13
3 escaped
Nonce Checks
1
Capability Checks
2
File Operations
1
External Requests
0
Bundled Libraries
0

SQL Query Safety

100% prepared1 total queries

Output Escaping

19% escaped16 total outputs
Data Flows
2 unsanitized

Data Flow Analysis

2 flows2 with unsanitized paths
settingsPage (MeluLiveChat_OptionsManager.php:286)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

Melu Managed Live Chat Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 9
actionadmin_noticesmelu-live-chat.php:33
actionplugins_loadedimelu-live-chat.php:58
filterscript_loader_tagmelu-live-chat.php:74
actionplugins_loadedMeluLiveChat_OptionsManager.php:41
actionadmin_initMeluLiveChat_OptionsManager.php:269
actionadmin_menuMeluLiveChat_Plugin.php:78
actionwp_enqueue_scriptsMeluLiveChat_Plugin.php:79
actionadmin_enqueue_scriptsMeluLiveChat_Plugin.php:80
actionwp_footerMeluLiveChat_ShortCodeScriptLoader.php:22
Maintenance & Trust

Melu Managed Live Chat Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedDec 17, 2025
PHP min version
Downloads4K

Community Trust

Rating100/100
Number of ratings1
Active installs100
Developer Profile

Melu Managed Live Chat Developer Profile

melulivechat

1 plugin · 100 total installs

94
trust score
Avg Security Score
100/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Melu Managed Live Chat

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/melu-live-chat/css/melu_app.css
Script Paths
https://meluchat.com/livechat/script.php

HTML / DOM Fingerprints

CSS Classes
melu-live-chat-container
Data Attributes
data-melu-chat-id
JS Globals
MeluJS
FAQ

Frequently Asked Questions about Melu Managed Live Chat