WordPress Doccure Core plugin < 1.5.4 - Unauthenticated Privilege Escalation vulnerability

Unauthenticated Privilege Escalation vulnerability discovered by Alyudin Nafiie in WordPress Plugin Doccure Core versions 1.5.4...

WordPress Call Now Button plugin <= 1.5.3 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Settings Update vulnerability

Missing Authorization to Authenticated Subscriber+ Limited Plugin Settings Update vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin Call Now Button versions = 1.5.3...