N/A
2015-02-02< 2.2.8
WordPress Calls to Action < 2.2.8 - Unauthenticated Stored Cross-Site Scripting
Minimum safe version
2.5.1
Update to 2.5.1 or later to address 5 fixable vulnerabilities
WordPress Calls to Action < 2.2.8 - Unauthenticated Stored Cross-Site Scripting
WordPress Calls to Action <= 2.2.7 - Stored XSS
WordPress Calls to Action Plugin <= 2.2.7 - Stored XSS
WordPress Calls to Action Plugin <= 2.4.3 - Reflected Cross Site Scripting
CVE-2015-8350