Input validation vulnerability in Quick Call Button 1.2.9

The Quick Call Button plugin for WordPress is unsafe in certain conditions for all versions up to and including 1.2.9. This vulnerability allows attackers who have administrator-level permissions to insert malicious scripts into webpages. When a user visits the webpage, the malicious script will run. This vulnerability only affects multi-site installations and installations where certain security features have been disabled.

Detected in:

Quick Call Button open vulnerable versions: >= * <= 1.2.9

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

Is this information incorrect? Please leave us a message.