Simple Contact Button Security & Risk Analysis

wordpress.org/plugins/simple-contact-button

Simple Contact Button: Add a customizable contact button to your website, allowing visitors to connect with you instantly and easily.

0 active installs v1.3 PHP 7.0+ WP 5.0+ Updated Unknown
chatcontact-buttoncustomer-supportmessagingwhatsapp
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Download
Safety Verdict

Is Simple Contact Button Safe to Use in 2026?

Generally Safe

Score 100/100

Simple Contact Button has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs
Risk Assessment

The "simple-contact-button" plugin v1.3 exhibits a generally strong security posture based on the provided static analysis. The absence of direct SQL injection vulnerabilities due to the exclusive use of prepared statements is a significant positive. Furthermore, the high percentage of properly escaped output and the presence of nonce checks on its two AJAX entry points indicate good coding practices aimed at preventing common web vulnerabilities. The plugin also demonstrates no concerning file operations, external HTTP requests, or known CVEs in its history, suggesting a mature and well-maintained codebase.

Key Concerns

  • Bundled outdated library
  • No capability checks on AJAX handlers
Vulnerabilities
None known

Simple Contact Button Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 17, 2026

Simple Contact Button Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
1
22 escaped
Nonce Checks
2
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
1

Bundled Libraries

Freemius1.0

Output Escaping

96% escaped23 total outputs
Data Flows
All sanitized

Data Flow Analysis

1 flows
<simple-contact-button> (simple-contact-button.php:0)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

Simple Contact Button Attack Surface

Entry Points2
Unprotected0

AJAX Handlers 2

authwp_ajax_get_specific_postssimple-contact-button.php:56
noprivwp_ajax_get_specific_postssimple-contact-button.php:57
WordPress Hooks 7
actionplugins_loadedsimple-contact-button.php:49
actionadmin_menusimple-contact-button.php:50
actionadmin_initsimple-contact-button.php:51
actionwp_footersimple-contact-button.php:52
actionwp_enqueue_scriptssimple-contact-button.php:53
actionwp_enqueue_scriptssimple-contact-button.php:54
actionadmin_enqueue_scriptssimple-contact-button.php:55
Maintenance & Trust

Simple Contact Button Maintenance & Trust

Maintenance Signals

WordPress version tested6.6.5
Last updatedUnknown
PHP min version7.0
Downloads1K

Community Trust

Rating100/100
Number of ratings1
Active installs0
Developer Profile

Simple Contact Button Developer Profile

bbseo1

1 plugin · 0 total installs

94
trust score
Avg Security Score
100/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Simple Contact Button

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/simple-contact-button/css/style.css/wp-content/plugins/simple-contact-button/js/scripts.js
Script Paths
/wp-content/plugins/simple-contact-button/js/scripts.js
Version Parameters
simple-contact-button/css/style.css?ver=simple-contact-button/js/scripts.js?ver=

HTML / DOM Fingerprints

CSS Classes
simple-contact-button-icon
HTML Comments
<!-- Simple Contact Button Settings Form -->
Data Attributes
data-phonedata-positiondata-icondata-message
JS Globals
simpleContactButtonSettings
REST Endpoints
/wp-json/simple-contact-button/v1/posts
Shortcode Output
[contact_button]
FAQ

Frequently Asked Questions about Simple Contact Button