Known Vulnerabilities for Call To Action Plugin by Tmarek
Listed below are 10 of the newest known vulnerabilities associated with "Call To Action Plugin" by "Tmarek".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-8732 json | The WP Maps Pro plugin for WordPress is vulnerable to Privilege Escalation via Administrator Account Creation in all versions... | Not Provided | 2026-05-29 | 2026-05-29 |
| CVE-2026-8418 json | The Games Catalog plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.2.0. T... | Not Provided | 2026-05-20 | 2026-05-20 |
| CVE-2026-6696 json | The Zingaya Click-to-Call plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'email', 'first_name',... | Not Provided | 2026-05-05 | 2026-05-05 |
| CVE-2026-6451 json | The cms-fuer-motorrad-werkstaetten plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to and inc... | Not Provided | 2026-04-17 | 2026-04-17 |
| CVE-2026-6394 json | The Nexa Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE plugin for WordPress is vulnerable to Server-Si... | Not Provided | 2026-05-20 | 2026-05-20 |
| CVE-2026-4351 json | The Perfmatters plugin for WordPress is vulnerable to arbitrary file overwrite via path traversal in all versions up to, and ... | Not Provided | 2026-04-10 | 2026-04-10 |
| CVE-2026-4133 json | The TextP2P Texting Widget plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to and includi... | Not Provided | 2026-04-22 | 2026-04-22 |
| CVE-2026-4121 json | The Kcaptcha plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to and including 1.0.1. This... | Not Provided | 2026-04-22 | 2026-04-22 |
| CVE-2026-4118 json | The Call To Action Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and includi... | Not Provided | 2026-04-22 | 2026-04-22 |
| CVE-2026-4004 json | The Task Manager plugin for WordPress is vulnerable to arbitrary shortcode execution via the 'search' AJAX action in all vers... | Not Provided | 2026-03-21 | 2026-04-08 |