Description

WordPress Plugin WordPress Calls to Action is prone to an unspecified vulnerability. No available information exists regarding this issue and it's impact on a vulnerable website. WordPress Plugin WordPress Calls to Action version 2.3.5 is vulnerable; prior versions may also be affected.

Remediation

Update to plugin version 2.3.6 or latest

References

https://wordpress.org/plugins/cta/changelog/

Related Vulnerabilities

WordPress Plugin Sexy Add Template Cross-Site Request Forgery (1.0)

WordPress Plugin WP Frontend Profile Security Bypass (1.2.1)

WordPress Plugin PublishPress Capabilities-User Role Access, Editor Permissions, Admin Menus Cross-Site Request Forgery (2.3.1)

OpenSSL Other Vulnerability (CVE-2015-1790)

MyBB Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-2333)

Severity

High

Tags

Missing Update