Extension WordPress
Vulnérabilités Call Now Button – The #1 Click to Call Button for WordPress
Cette page rassemble les failles publiées pour Call Now Button – The #1 Click to Call Button for WordPress, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Call Now Button – The #1 Click to Call Button for WordPress
5 fiches
Call Now Button <= 1.5.4 – Authenticated (Subscriber+) Missing Authorization to Multiple Functions
The Call Now Button – The #1 Click to Call Button for WordPress plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on multiple functions in all versions up to, and…
*-1.5.4
1.5.5
29/10/2025
Call Now Button <= 1.5.3 – Missing Authorization to Authenticated (Subscriber+) Limited Plugin Settings Update
The Call Now Button – The #1 Click to Call Button for WordPress plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the activate function in all versions up to,…
*-1.5.3
1.5.4
29/10/2025
Call Now Button <= 1.4.13 – Cross-Site Request Forgery
The Call Now Button – The #1 Click to Call Button for WordPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4.13. This is due to missing or incorrect nonce…
*-1.4.13
1.4.14
24/01/2025
Call Now Button <= 1.4.6 – Authenticated (Admin+) Stored Cross-Site Scripting
The Call Now Button – The #1 Click to Call Button for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.4.6 due to insufficient input sanitization…
*-1.4.6
1.4.7
05/04/2024
Call Now Button <= 1.1.1 – Reflected Cross-Site Scripting
The Call Now Button WordPress plugin before 1.1.2 does not escape a parameter before outputting it back in an attribute of a hidden input, leading to a Reflected Cross-Site Scripting when premium is enabled
[*, 1.1.2)
1.1.2
25/04/2022
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.