Cross-Site Request Forgery Vulnerability in Call me Now Plugin by Tussendoor

CVE-2025-23745

Summary

A vulnerability exists in the Call me Now plugin developed by Tussendoor, which is susceptible to Cross-Site Request Forgery (CSRF) attacks. Exploiting this vulnerability can allow malicious actors to trigger unauthorized actions on behalf of authenticated users, ultimately leading to Stored Cross-Site Scripting (XSS) issues. This security flaw poses significant risks to the integrity and confidentiality of user data and can undermine the trustworthiness of applications that rely on the plugin. It is crucial for users to implement necessary updates and security measures to mitigate these risks.

References