Plugin icon

All-in-one Sticky Floating Contact Form, Call, Click to Chat, and 50+ Social Icon Tabs – My Sticky Elements

mystickyelements

Vulnerabilities:

6

Last Updated:

March 19, 2026

Active Installs:

40000

Published
Title
Fixed in
CVSS
Published
2025-12-31
Title
My Sticky Elements < 2.3.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Bulk Lead Deletion
Fixed in
Fixed in 2.3.4
CVSS
4.3 (medium)
Published
2025-12-25
Title
My Sticky Elements < 2.3.4 - Missing Authorization
Fixed in
Fixed in 2.3.4
CVSS
4.3 (medium)
Published
2023-12-26
Title
All-in-one Floating Contact Form < 2.1.4 - Unauthenticated Unauthorised Action
Fixed in
Fixed in 2.1.4
CVSS
5.3 (medium)
Published
2023-07-03
Title
All-in-one Floating Contact Form < 2.1.2 - Admin+ Stored Cross-Site Scripting
Fixed in
Fixed in 2.1.2
CVSS
3.5 (low)
Published
2023-02-06
Title
My Sticky Elements < 2.0.9 - Admin+ SQLi
Fixed in
Fixed in 2.0.9
CVSS
5.5 (medium)
Published
2022-01-10
Title
All-in-one Floating Contact Form < 2.0.4 - Authenticated Reflected Cross-Site Scripting (XSS)
Fixed in
Fixed in 2.0.4
CVSS
4.8 (medium)