Stpetedesign

stpetedesign

4 CVEs • 2 products

Products (2)

Click to collapse

Toggle

Call Now Accessibility Button

call_now_accessibility_button

CVEs (4)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-30874 1Stpetedesign 1Gps Plotter Jun 17, 2026 Aug 17, 2023 N/A· v4 4.8 MEDIUM· v3 N/A· v2 Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Steve Curtis, St. Pete Design Gps Plotter plugin <= 5.1.4 versions.
CVE-2023-2635 1Stpetedesign 1Call Now Accessibility Button Jun 17, 2026 Jul 10, 2023 N/A· v4 4.8 MEDIUM· v3 N/A· v2 The Call Now Accessibility Button WordPress plugin before 1.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even wh...Show more The Call Now Accessibility Button WordPress plugin before 1.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)Show less
CVE-2023-2028 1Stpetedesign 1Call Now Accessibility Button Jun 17, 2026 Jul 10, 2023 N/A· v4 4.8 MEDIUM· v3 N/A· v2 The Call Now Accessibility Button WordPress plugin before 1.1 does not properly sanitize some of its settings, which could allow high-privilege users to perform Stored Cross-Site Scripting (XSS) attacks even when the unf...Show more The Call Now Accessibility Button WordPress plugin before 1.1 does not properly sanitize some of its settings, which could allow high-privilege users to perform Stored Cross-Site Scripting (XSS) attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).Show less
CVE-2023-28933 1Stpetedesign 1Call Now Accessibility Button Jun 17, 2026 Jun 12, 2023 N/A· v4 4.8 MEDIUM· v3 N/A· v2 Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in StPeteDesign Call Now Accessibility Button plugin <= 1.1 versions.