Plugin icon

WP CTA – Call Now Button, Sticky Button & Call to Action Builder

easy-sticky-sidebar

Vulnerabilities:

6

Last Updated:

May 6, 2026

Active Installs:

2000

Published
Title
Fixed in
CVSS
Published
2026-07-28
Title
WP CTA < 2.1.3 - Authenticated (Administrator+) Server-Side Request Forgery
Fixed in
Fixed in 2.1.3
CVSS
4.9 (medium)
Published
2026-07-10
Title
WP CTA < 2.3.0 - Unauthenticated Time-Based Blind SQL Injection via 'fildname' Parameter
Fixed in
Fixed in 2.3.0
CVSS
7.5 (high)
Published
2026-03-03
Title
WP CTA – Sticky CTA Builder, Generate Leads, Promote Sales < 2.1.3 - Missing Authorization
Fixed in
Fixed in 2.1.3
CVSS
5.3 (medium)
Published
2025-08-01
Title
WP CTA – Call To Action Plugin, Sticky CTA, Sticky Buttons < 1.7.1 - Missing Authorization to Unauthenticated Sticky Status Update
Fixed in
Fixed in 1.7.1
CVSS
5.3 (medium)
Published
2025-06-27
Title
WordPress CTA < 1.7.1 - Cross-Site Request Forgery
Fixed in
Fixed in 1.7.1
CVSS
4.3 (medium)
Published
2023-10-25
Title
WordPress CTA < 1.5.9 - Unauthenticated AJAX Actions Call
Fixed in
Fixed in 1.5.9
CVSS
6.5 (medium)