Skip to content
OpenAdvisories

Vendor

jgrietveld

2 known vulnerabilities.

Products

Call Now Button – The #1 Click to Call Button for WordPress 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.3
    CVE-2025-11587

    Call Now Button <= 1.5.3 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Settings Update

    The Call Now Button – The #1 Click to Call Button for WordPress plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the activate function in all versions up to, and including, 1.5.3. This makes it possi…

    jgrietveld Call Now Button – The #1 Click to Call Button for WordPress Web / CMS
  • Medium 4.3
    CVE-2025-11632

    Call Now Button <= 1.5.4 - Authenticated (Subscriber+) Missing Authorization to Multiple Functions

    The Call Now Button – The #1 Click to Call Button for WordPress plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on multiple functions in all versions up to, and including, 1.5.4. This makes it possible for a…

    jgrietveld Call Now Button – The #1 Click to Call Button for WordPress Web / CMS