PT-2025-44275 · WordPress · Call Now Button

Burak Kılınç · Published 2025-10-29 · Updated 2025-10-29 · CVE-2025-11632

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Call Now Button versions prior to 1.5.5

Description The Call Now Button plugin for WordPress is susceptible to unauthorized data access because of a missing capability check in multiple functions. Attackers with Subscriber-level access or higher can generate links to a billing portal, allowing them to view and modify billing information, generate chat session tokens, and view domain status. The issue was partially addressed in version 1.5.4 and fully resolved in version 1.5.5. The vulnerable functions lack proper authorization controls, potentially exposing sensitive data.

Recommendations Update Call Now Button to version 1.5.5 or later.

Fix

LPE

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2025-11632

Affected Products

Call Now Button

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2025-11632 · Security Note
• https://plugins.trac.wordpress.org/browser/call-now-button/tags/1.5.3/src/admin/CnbAdminAjax.php#L21 · Note
• https://wordfence.com/threat-intel/vulnerabilities/id/379547a2-6b22-4ec9-8570-a043dda7ec09?source=cve · Note
• https://plugins.trac.wordpress.org/browser/call-now-button/tags/1.5.3/src/admin/CnbAdminAjax.php#L167 · Note
• https://twitter.com/CVEnew/status/1983522119465214220 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1983617499120775446 · Twitter Post
• https://plugins.trac.wordpress.org/browser/call-now-button/tags/1.5.3/src/admin/chat/class-cnb-chat-controller.php#L52 · Note
• https://plugins.trac.wordpress.org/browser/call-now-button/tags/1.5.3/src/admin/CnbAdminAjax.php#L50 · Note
• https://plugins.trac.wordpress.org/browser/call-now-button/tags/1.5.3/src/admin/CnbAdminAjax.php#L154 · Note
• https://plugins.trac.wordpress.org/browser/call-now-button/tags/1.5.3/src/admin/CnbAdminAjax.php#L147 · Note