Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: jgrietveld Clear all filters
TI-2025-10617 CVE-2025-11587 · GHSA-5797-v2fm-f69x

Call Now Button <= 1.5.3 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Settings Update

Priority MEDIUM 53

The Call Now Button – The #1 Click to Call Button for WordPress plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the activate function in all versions up to, an…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00234 Published 2025-10-29 No fix listed CWE-862
TI-2025-10662 CVE-2025-11632 · GHSA-9q6p-w395-hc48

Call Now Button <= 1.5.4 - Authenticated (Subscriber+) Missing Authorization to Multiple Functions

Priority LOW 20

The Call Now Button – The #1 Click to Call Button for WordPress plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on multiple functions in all versions up to, and includi…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00269 Published 2025-10-29 No fix listed CWE-862