Lead Generation Contact Widget & AI Chatbot: Chat Button, Phone Call, Telegram, Email – SiteLeads Security & Risk Analysis

wordpress.org/plugins/siteleads

💬 Turns visitors into leads. Contact Widget, Free AI Chatbot, WhatsApp, Instagram, Facebook Messenger, Telegram, phone call, email, 14+ channels.

10K active installs v1.1.7 PHP 7.4+ WP 6.8+ Updated May 11, 2026
ai-chatbotchat-buttoncontact-widgetlead-generationwhatsapp
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Download
Safety Verdict

Is Lead Generation Contact Widget & AI Chatbot: Chat Button, Phone Call, Telegram, Email – SiteLeads Safe to Use in 2026?

Generally Safe

Score 100/100

Lead Generation Contact Widget & AI Chatbot: Chat Button, Phone Call, Telegram, Email – SiteLeads has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 3mo ago
Risk Assessment

The 'siteleads' v1.0.0 plugin exhibits a strong security posture based on the provided static analysis. The absence of any identified dangerous functions, raw SQL queries, or unescaped output is a significant positive. Furthermore, the plugin demonstrates robust input validation and authorization practices by having zero unprotected AJAX handlers, REST API routes, shortcodes, or cron events, and a complete absence of any identified taint flows. The vulnerability history is also completely clean, with no known CVEs ever recorded for this plugin. This suggests a development team that is either highly security-conscious or has not yet encountered exploitable vulnerabilities. The only minor point of consideration is the bundling of Lodash, which, while common, should always be kept up-to-date to mitigate potential known vulnerabilities within the library itself, though no specific issues are indicated here.

Key Concerns

  • Bundled library Lodash
Vulnerabilities
None known

Lead Generation Contact Widget & AI Chatbot: Chat Button, Phone Call, Telegram, Email – SiteLeads Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

Lead Generation Contact Widget & AI Chatbot: Chat Button, Phone Call, Telegram, Email – SiteLeads Release Timeline

v1.1.7Current
v1.1.6
v1.1.5
v1.1.4
v1.1.3
v1.1.2
v1.1.0
v1.0.0
Code Analysis
Analyzed Mar 16, 2026

Lead Generation Contact Widget & AI Chatbot: Chat Button, Phone Call, Telegram, Email – SiteLeads Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
0
0 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
1

Bundled Libraries

Lodash
Attack Surface

Lead Generation Contact Widget & AI Chatbot: Chat Button, Phone Call, Telegram, Email – SiteLeads Attack Surface

Entry Points0
Unprotected0
Maintenance & Trust

Lead Generation Contact Widget & AI Chatbot: Chat Button, Phone Call, Telegram, Email – SiteLeads Maintenance & Trust

Maintenance Signals

WordPress version tested7.0.2
Last updatedMay 11, 2026
PHP min version7.4
Downloads45K

Community Trust

Rating100/100
Number of ratings2
Active installs10K
Developer Profile

Lead Generation Contact Widget & AI Chatbot: Chat Button, Phone Call, Telegram, Email – SiteLeads Developer Profile

Extend Themes

61 plugins · 420K total installs

78
trust score
Avg Security Score
99/100
Avg Patch Time
127 days
View full developer profile
Detection Fingerprints

How We Detect Lead Generation Contact Widget & AI Chatbot: Chat Button, Phone Call, Telegram, Email – SiteLeads

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/siteleads/assets/css/admin.css/wp-content/plugins/siteleads/assets/css/frontend.css/wp-content/plugins/siteleads/assets/js/admin.js/wp-content/plugins/siteleads/assets/js/frontend.js
Script Paths
/wp-content/plugins/siteleads/assets/js/admin.js/wp-content/plugins/siteleads/assets/js/frontend.js
Version Parameters
siteleads/assets/css/admin.css?ver=siteleads/assets/css/frontend.css?ver=siteleads/assets/js/admin.js?ver=siteleads/assets/js/frontend.js?ver=

HTML / DOM Fingerprints

CSS Classes
siteleads-admin-pagesiteleads-form-buildersiteleads-form-wrapper
HTML Comments
<!-- SiteLeads Form Builder Start --><!-- SiteLeads Form Builder End --><!-- SiteLeads Frontend Form Start --><!-- SiteLeads Frontend Form End -->
Data Attributes
data-siteleads-form-iddata-siteleads-nonce
JS Globals
siteleads_ajax_object
REST Endpoints
/wp-json/siteleads/v1/forms/wp-json/siteleads/v1/submissions
Shortcode Output
[siteleads_form id="
FAQ

Frequently Asked Questions about Lead Generation Contact Widget & AI Chatbot: Chat Button, Phone Call, Telegram, Email – SiteLeads