Stpetedesign Call Now Accessibility Button — known CVE vulnerabilities

Every CVE whose affected-product data names Stpetedesign Call Now Accessibility Button, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2023-28933 — CVSS 5.9 (medium): Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in StPeteDesign Call Now Accessibility Button plugin <= 1.1 versions.
• CVE-2023-2028 — CVSS 4.8 (medium): The Call Now Accessibility Button WordPress plugin before 1.1 does not properly sanitize some of its settings, which could allow…
• CVE-2023-2635 — CVSS 4.8 (medium): The Call Now Accessibility Button WordPress plugin before 1.1 does not sanitise and escape some of its settings, which could allow high…