WP CTA – Call Now Button, Sticky Button & Call to Action Builder vulnerabilities
1 known vulnerability in WP CTA – Call Now Button, Sticky Button & Call to Action Builder from Blendmedia. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest first
- 7.5 High severity
WP CTA – Call Now Button, Sticky Button & Call…: Improper Neutralization of Special Elements used in an SQL Command
The WP CTA – Sticky CTA Builder, Generate Leads, Promote Sales plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'fildname' parameter in all versions up to, and including, 2.2.2. This is due to insufficient escaping of user-supplied