CVE-2024-12709: Cross-Site Request Forgery (CSRF)

The Bulk Me Now! WordPress plugin through 2.0 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks...

CVE-2024-12708: Improper Neutralization of Input During Web Page Generation

The Bulk Me Now! WordPress plugin through 2.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

WordPress plugin Bulk Me Now! 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the WordPre...

WordPress plugin Bulk Me Now! 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the WordPre...

CVE-2024-12638: Improper Neutralization of Input During Web Page Generation

The Bulk Me Now! WordPress plugin through 2.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

PT-2025-1923

Name of the Vulnerable Software and Affected Versions Bulk Me Now! WordPress plugin versions through 2.0 Description The issue is related to a Reflected Cross-Site Scripting problem, where a parameter is not properly sanitised and escaped before being outputted back in the page. This could be...

CVE-2025-24738

Cross-Site Request Forgery CSRF vulnerability in Jerry Rietveld Call Now Button call-now-button allows Cross Site Request Forgery.This issue affects Call Now Button: from n/a through = 1.4.13...

CVE-2025-24738 WordPress Call Now Button plugin <= 1.4.13 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Jerry Rietveld Call Now Button call-now-button allows Cross Site Request Forgery.This issue affects Call Now Button: from n/a through = 1.4.13...

CVE-2025-24738

CVE-2025-24738 is a CSRF vulnerability in the WordPress Call Now Button plugin (versions

WordPress Call Now Button plugin <= 1.4.13 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Rafie Muhammad Patchstack in WordPress Plugin Call Now Button versions = 1.4.13...

PT-2025-5550 · Unknown · Call Now Button

Name of the Vulnerable Software and Affected Versions: Call Now Button versions 1.4.13 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the Call Now Button, allowing unauthorized requests. The estimated number of potentially affected devices is not specified. There is no...

WordPress plugin Call Now Button 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

CVE-2025-24738: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Jerry Rietveld Call Now Button call-now-button allows Cross Site Request Forgery.This issue affects Call Now Button: from n/a through = 1.4.13...

CVE-2025-23745

Cross-Site Request Forgery CSRF vulnerability in Tussendoor B.V. Call me Now call-me-now allows Stored XSS.This issue affects Call me Now: from n/a through = 1.0.5...

CVE-2025-23745 WordPress Call me Now plugin <= 1.0.5 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Tussendoor B.V. Call me Now call-me-now allows Stored XSS.This issue affects Call me Now: from n/a through = 1.0.5...

CVE-2025-23745

CVE-2025-23745 describes a CSRF vulnerability in the WordPress plugin “Call me Now” that can trigger a Stored XSS. The description states affected versions are from n/a up to 1.0.5. Connected Red Hat advisory RH:CVE-2025-23745 repeats this fault, confirming the issue location as Call me Now. The ...

WordPress Call me Now plugin <= 1.0.5 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by SOPROBRO in WordPress Plugin Call me Now versions = 1.0.5...

WordPress plugin Call me Now 跨站请求伪造漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

PT-2025-5061 · Unknown · Call Me Now

Name of the Vulnerable Software and Affected Versions: Call me Now versions n/a through 1.0.5 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web application, and also...

CVE-2025-23745: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Tussendoor B.V. Call me Now call-me-now allows Stored XSS.This issue affects Call me Now: from n/a through = 1.0.5...