Plugin icon

Call Now Button – The #1 Click to Call Button for WordPress

call-now-button

Vulnerabilities:

5

Last Updated:

March 20, 2026

Active Installs:

200000

Published
Title
Fixed in
CVSS
Published
2025-10-29
Title
Call Now Button < 1.5.5 - Authenticated (Subscriber+) Missing Authorization to Multiple Functions
Fixed in
Fixed in 1.5.5
CVSS
4.3 (medium)
Published
2025-10-28
Title
Call Now Button < 1.5.4 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Settings Update
Fixed in
Fixed in 1.5.4
CVSS
4.3 (medium)
Published
2025-01-24
Title
Call Now Button < 1.4.14 - Cross-Site Request Forgery
Fixed in
Fixed in 1.4.14
CVSS
4.3 (medium)
Published
2024-04-05
Title
Call Now Button < 1.4.7 - Admin+ Stored XSS
Fixed in
Fixed in 1.4.7
CVSS
3.5 (low)
Published
2022-04-25
Title
Call Now Button < 1.1.2 - Reflected Cross-Site Scripting
Fixed in
Fixed in 1.1.2
CVSS
3.4 (low)