PT-2024-22706 · WordPress · Call Now Button

Name of the Vulnerable Software and Affected Versions: The Call Now Button WordPress plugin versions prior to 1.4.7 Description: The issue allows high privilege users, such as admins, to perform Stored Cross-Site Scripting attacks, even when the unfiltered html capability is disallowed, for examp...

WordPress plugin Call Now Button 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the WordPre...

CVE-2023-47819

Cross-Site Request Forgery CSRF vulnerability in Dang Ngoc Binh Easy Call Now by ThikShare plugin = 1.1.0 versions...

CVE-2023-47819 WordPress Easy Call Now by ThikShare Plugin <= 1.1.0 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Dang Ngoc Binh Easy Call Now by ThikShare plugin = 1.1.0 versions...

CVE-2023-47819

CVE-2023-47819 affects the WordPress plugin Easy Call Now by ThikShare, versions 1.1.0 when released; no explicit in-product workaround is provided in the documents. Exploitation status is not indicated in the supplied materials. Monitor vendor advisories for a confirmed fix and downstream CVE re...

PT-2023-30628 · Thikshare · Easy Call Now

Name of the Vulnerable Software and Affected Versions: Easy Call Now by ThikShare plugin versions = 1.1.0 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This means an attacker could potentially trick a user into performing unintended actions on a web...

WordPress Plugin Easy Call Now by ThikShare Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on servers running PHP and MySQL. WordPress Plugin Easy Call Now by ThikShare...

CVE-2023-47819: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Dang Ngoc Binh Easy Call Now by ThikShare plugin = 1.1.0 versions...

WordPress Plugin lokalyze-call-now Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

CVE-2023-24401

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Davidsword Mobile Call Now & Map Buttons plugin = 1.5.0 versions...

CVE-2023-24401 WordPress Mobile Call Now & Map Buttons Plugin <= 1.5.0 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Davidsword Mobile Call Now & Map Buttons plugin = 1.5.0 versions...

CVE-2023-24401

CVE-2023-24401 is a Stored XSS vulnerability in the WordPress plugin Davidsword Mobile Call Now & Map Buttons (versions

CVE-2023-34187

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Alan Tien Call Now Icon Animate plugin = 0.1.0 versions...

CVE-2023-34187

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Alan Tien Call Now Icon Animate plugin = 0.1.0 versions...

CVE-2023-34187 WordPress Call Now Icon Animate Plugin <= 0.1.0 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Alan Tien Call Now Icon Animate plugin = 0.1.0 versions...

CVE-2023-34187 WordPress Call Now Icon Animate Plugin <= 0.1.0 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Alan Tien Call Now Icon Animate plugin = 0.1.0 versions...

CVE-2023-24401: Improper Neutralization of Input During Web Page Generation

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Davidsword Mobile Call Now & Map Buttons plugin = 1.5.0 versions...

WordPress plugin call-now-icon-animate 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

CVE-2023-34187: Improper Neutralization of Input During Web Page Generation

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Alan Tien Call Now Icon Animate plugin = 0.1.0 versions...

WordPress WordPress Easy Call Now Button by elixirs.io Plugin <= 1.0.5 is vulnerable to Cross Site Scripting (XSS)

Software WordPress Easy Call Now Button by elixirs.io Type Plugin Vulnerable versions = 1.0.5 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID 566a7ec248a1 Credits Rafie...