Lucene search
K

7 matches found

RedhatCVE
RedhatCVE
added 2025/10/30 1:22 p.m.7 views

CVE-2025-11632

The Call Now Button – The 1 Click to Call Button for WordPress plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on multiple functions in all versions up to, and including, 1.5.4. This makes it possible for authenticated attackers, with...

4.3CVSS5AI score0.00053EPSS
Exploits0References1
NVD
NVD
added 2025/10/29 1:15 p.m.6 views

CVE-2025-11632

The Call Now Button – The 1 Click to Call Button for WordPress plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on multiple functions in all versions up to, and including, 1.5.4. This makes it possible for authenticated attackers, with...

4.3CVSS0.00053EPSS
Exploits0References7
CVE
CVE
added 2025/10/29 12:31 p.m.15 views

CVE-2025-11632

The WordPress plugin Call Now Button (Call Now Button – The #1 Click to Call Button for WordPress) is affected by CVE-2025-11632 due to missing capability checks in multiple functions across versions up to 1.5.4. The issue enables authenticated users with Subscriber-level access and above to gene...

4.3CVSS4.7AI score0.00053EPSS
Exploits0References7
Cvelist
Cvelist
added 2025/10/29 12:31 p.m.7 views

CVE-2025-11632 Call Now Button <= 1.5.4 - Authenticated (Subscriber+) Missing Authorization to Multiple Functions

The Call Now Button – The 1 Click to Call Button for WordPress plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on multiple functions in all versions up to, and including, 1.5.4. This makes it possible for authenticated attackers, with...

4.3CVSS0.00053EPSS
Exploits0References7
Vulnrichment
Vulnrichment
added 2025/10/29 12:31 p.m.4 views

CVE-2025-11632 Call Now Button <= 1.5.4 - Authenticated (Subscriber+) Missing Authorization to Multiple Functions

The Call Now Button – The 1 Click to Call Button for WordPress plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on multiple functions in all versions up to, and including, 1.5.4. This makes it possible for authenticated attackers, with...

4.3CVSS4.7AI score0.00053EPSS
Exploits0References7
Positive Technologies
Positive Technologies
added 2025/10/29 12:0 a.m.3 views

PT-2025-44275

Name of the Vulnerable Software and Affected Versions Call Now Button versions prior to 1.5.5 Description The Call Now Button plugin for WordPress is susceptible to unauthorized data access because of a missing capability check in multiple functions. Attackers with Subscriber-level access or high...

4.3CVSS6AI score0.00053EPSS
Exploits0References10
Hacker One
Hacker One
added 2017/10/18 3:14 p.m.24 views

Gratipay: Broken link for stale DNS entry may be leveraged for Phishing, Misinformation, Serving Malware

Hi Team, Page: https://gratipay.com/Breadcrumbel/ Broken link for stale DNS entry: Homepage Root domain breadcumbry.com has expiration date: Registrar Registration Expiration Date: 2018-06-10T18:18:30Z And also from whois: Domain Status: OK https://icann.org/eppok OK status means it has no...

6.8AI score
Exploits0
Rows per page
Query Builder