Plugin icon

My Sticky Bar – Floating Notification Bar & Sticky Header (formerly myStickymenu)

mystickymenu

Vulnerabilities:

7

Last Updated:

May 12, 2026

Active Installs:

100000

Published
Title
Fixed in
CVSS
Published
2026-03-11
Title
My Sticky Bar < 2.8.7 - Unauthenticated SQLi via 'stickymenu_contact_lead_form' Action
Fixed in
Fixed in 2.8.7
CVSS
7.5 (high)
Published
2024-08-23
Title
My Sticky Bar < 2.7.3 - Admin+ Stored XSS
Fixed in
Fixed in 2.7.3
CVSS
3.5 (low)
Published
2024-07-11
Title
My Sticky Bar < 2.7.2 - Admin+ Stored XSS
Fixed in
Fixed in 2.7.2
CVSS
3.5 (low)
Published
2024-02-28
Title
My Sticky Bar < 2.6.8 - Admin+ Stored XSS
Fixed in
Fixed in 2.6.8
CVSS
3.5 (low)
Published
2024-01-03
Title
My Sticky Bar < 2.6.7 - CSV Export via CSRF to Sensitive Information Disclosure
Fixed in
Fixed in 2.6.7
CVSS
3.1 (low)
Published
2023-10-27
Title
myStickymenu < 2.6.5 - Subscriber+ Arbitrary Form Leads Deletion
Fixed in
Fixed in 2.6.5
CVSS
4.3 (medium)
Published
2021-06-21
Title
myStickymenu < 2.5.2 - Authenticated Stored XSS
Fixed in
Fixed in 2.5.2
CVSS
5.9 (medium)