PatchTheCVEwidget4call vulnerabilities and fixes
Recent CVEs affecting widget4call, with upgrade or downgrade steps. 1 tracked.
widget4call has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2025-02-01. Highest priority: CVE-2024-13099 (score 37/100).
- CVE-2024-13099 MEDIUM 5.4 UPGRADE The Widget4Call WordPress plugin through 1.0.7 does not sanitise and escape a parameter before outputting it b
FAQ
How do I fix widget4call vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is widget4call being exploited right now?
None of the tracked widget4call CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which widget4call CVE should I patch first?
CVE-2024-13099 currently ranks highest (37/100): The Widget4Call WordPress plugin through 1.0.7 does not sanitise and escape a parameter before outputting it b.