Call Now Button – The #1 Click to Call Button for WordPress, CVE-2025-24738
- CVE, Research URL
- Home page URL
-
Security reports for Call Now Button – The #1 Click to Call Button for WordPress
- Published on
- Jan 24, 2025
- Research Description
- Cross-Site Request Forgery (CSRF) vulnerability in NowButtons.com Call Now Button allows Cross Site Request Forgery. This issue affects Call Now Button: from n/a through 1.4.13.
- Affected versions
-
max 1.4.14.
- Status
-
vulnerable