| CVE-2023-24401 | WordPress Mobile Call Now & Map Buttons Plugin <= 1.5.0 is vulnerable to Cross Site Scripting (XSS) | Davidsword | Mobile Call Now & Map Buttons | Medium | 5.9 | 2023-08-30 15:48:55 | Deep Dive |
| CVE-2023-34187 | WordPress Call Now Icon Animate Plugin <= 0.1.0 is vulnerable to Cross Site Scripting (XSS) | Alan Tien | Call Now Icon Animate | Medium | 5.9 | 2023-08-30 13:00:49 | Deep Dive |
| CVE-2023-3248 | All-in-one Floating Contact Form < 2.1.2 - Admin+ Stored Cross-Site Scripting | Unknown | All-in-one Floating Contact Form, Call, Chat, and 50+ Social Icon Tabs | 中危 | - | 2023-07-24 10:20:25 | Deep Dive |
| CVE-2023-3527 | Avaya Call Management System CSV injection vulnerability | Avaya | Avaya Call Management System | Medium | 6.8 | 2023-07-18 21:10:37 | Deep Dive |
| CVE-2023-3245 | Floating Chat Widget < 3.1.2 - Admin+ Stored Cross-Site Scripting | Unknown | Floating Chat Widget: Contact Chat Icons, Telegram Chat, Line Messenger, WeChat, Email, SMS, Call Button | 中危 | - | 2023-07-17 13:29:56 | Deep Dive |
| CVE-2023-2635 | Call Now Accessibility Button < 1.1 - Admin+ Stored XSS | Unknown | Call Now Accessibility Button | 中危 | - | 2023-07-10 12:41:08 | Deep Dive |
| CVE-2023-2028 | Call Now Accessibility Button < 1.1 - Admin+ Stored Cross Site Scripting | Unknown | Call Now Accessibility Button | 中危 | - | 2023-07-10 12:40:57 | Deep Dive |
| CVE-2023-28933 | WordPress Call Now Accessibility Button Plugin <= 1.1 is vulnerable to Cross Site Scripting (XSS) | StPeteDesign | Call Now Accessibility Button | Medium | 5.9 | 2023-06-12 15:10:02 | Deep Dive |
| CVE-2023-25710 | WordPress Click to Call or Chat Buttons Plugin <= 1.4.0 is vulnerable to Cross Site Scripting (XSS) | DIGITALBLUE | Click to Call or Chat Buttons | Medium | 5.9 | 2023-04-25 11:34:01 | Deep Dive |
| CVE-2023-0487 | My Sticky Elements < 2.0.9 - Admin+ SQLi | Unknown | All-in-one Floating Contact Form, Call, Chat, and 50+ Social Icon Tabs | 高危 | - | 2023-02-27 15:24:40 | Deep Dive |
| CVE-2022-3858 | Chaty < 3.0.3 - Admin+ SQLi | Unknown | Floating Chat Widget: Contact Chat Icons, Telegram Chat, Line, WeChat, Email, SMS, Call Button | 高危 | - | 2022-12-05 16:50:40 | Deep Dive |
| CVE-2022-3415 | Chat Bubble < 2.3 - Unauthenticated Stored Cross-Site Scripting | Unknown | Chat Bubble – Floating Chat with Contact Chat Icons, Messages, Telegram, Email, SMS, Call me back | 中危 | - | 2022-11-14 00:00:00 | Deep Dive |
| CVE-2022-36796 | WordPress CallRail Phone Call Tracking plugin <= 0.4.9 - Cross-Site Request Forgery (CSRF) vulnerability leading to Stored Cross-Site Scripting (XSS) | CallRail, Inc. | CallRail Phone Call Tracking (WordPress plugin) | Medium | 6.1 | 2022-09-01 16:49:39 | Deep Dive |
| CVE-2022-1644 | Call&Book Mobile Bar <= 1.2.2 - Admin+ Stored Cross Site Scripting | Unknown | Call&Book Mobile Bar | 中危 | - | 2022-05-30 08:36:09 | Deep Dive |
| CVE-2022-1455 | Call Now Button < 1.1.2 - Reflected Cross-Site Scripting | Unknown | Call Now Button | 中危 | - | 2022-05-16 14:31:07 | Deep Dive |
| CVE-2021-24867 | Backdoored Plugins & Themes from AccessPress Themes | AccessPress Themes | Frontend Post WordPress Plugin – AccessPress Anonymous Post | 超危 | - | 2022-02-21 10:45:39 | Deep Dive |
| CVE-2022-0148 | All-in-one Floating Contact Form < 2.0.4 - Authenticated Reflected Cross-Site Scripting (XSS) | Unknown | All-in-one Floating Contact Form, Call, Chat, and 50+ Social Icon Tabs – My Sticky Elements | 中危 | - | 2022-02-07 15:47:25 | Deep Dive |
| CVE-2021-25016 | Chaty < 2.8.3 - Reflected Cross-Site Scripting | Unknown | Floating Chat Widget: Contact Icons, Messages, Telegram, Email, SMS, Call Button – Chaty | 中危 | - | 2022-01-03 12:49:12 | Deep Dive |
| CVE-2021-24992 | Buttonizer - Smart Floating Action Button < 2.5.5 - Admin+ Stored Cross-Site Scripting | Unknown | Smart Floating / Sticky Buttons – Call, Sharing, Chat Widgets & More – Buttonizer | 中危 | - | 2021-12-27 10:33:25 | Deep Dive |
| CVE-2021-25448 | SAMSUNG Smart Touch Call 安全漏洞 | Samsung Mobile | Smart Touch Call | 中危 | - | 2021-08-05 19:44:02 | Deep Dive |