Skip to content
OpenAdvisories

Vendor

zingaya

1 known vulnerabilities.

Products

Zingaya Click-to-Call 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.1
    CVE-2026-6696

    Zingaya Click-to-Call <= 1.0 - Reflected Cross-Site Scripting via 'email' Parameter

    The Zingaya Click-to-Call plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'email', 'first_name', 'last_name', and 'phone' parameters on the plugin's sign-up admin page in all versions up to, and including, 1.0. This is due to insu…

    zingaya Zingaya Click-to-Call Web / CMS