Mobile Call Now & Map Buttons
Mobile Call Now & Map Buttons has one disclosed vulnerability in the WordSec catalog, all reported in 2023; it is fixed as of September 2026. Their average CVSS score is 4.4, and the most serious one scores 4.4 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for Mobile Call Now & Map Buttons has a vendor fix available, so running the current release closes it.
All of these findings were reported by Abdi Pranata. Mobile Call Now & Map Buttons is installed on roughly 4,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.
CVE-2023-24401Mobile Call Now & Map Buttons < 1.6.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Read the full analysisVulnerability Records

Mobile Call Now & Map Buttons
Author
roimediaworks
Mobile Call Now & Map Buttons adds a sticky mobile contact bar with optional Call Now and Directions buttons. It is useful for local businesses that want mobile visitors to call or open directions quickly. Features Add a mobile Call Now button using a phone number. Add a Directions button using a street address or GPS coordinates. Add an optional Google Place ID for a more precise Google Maps destination. Customize bar background, button colors, and button text. Choose the maximum device width where the buttons appear. Optional z-index and append-to-body settings for theme compatibility.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C