WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
sticky-buttons
Published
2024-01-22
Title
Sticky Buttons < 3.2.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
sticky-buttons
Published
2024-04-11
Title
Sticky Buttons < 3.2.4 - Button Deletion via CSRF
Slug
sticky-buttons
Published
2025-01-24
Title
Sticky Buttons < 4.1.2 - Cross-Site Request Forgery to Settings Update
Slug
sticky-chat-button
Published
2025-01-16
Title
Sticky Button – Click to Chat <= 1.0 - Unauthenticated Stored Cross-Site Scripting
Slug
sticky-chat-widget
Published
2023-12-26
Title
Sticky Chat Widget < 1.1.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
sticky-chat-widget
Published
2026-08-18
Title
Sticky Chat Widget – Floating Chat Icons, Contact Form, Call, Click to Chat, Email & Message Buttons < 1.4.3 - Unauthenticated SQL Injection
Slug
sticky-header-effects-for-elementor
Published
2025-09-22
Title
Sticky Header Effects for Elementor < 2.1.3 - Missing Authorization
Slug
sticky-header-oceanwp
Published
2022-09-26
Title
Oceanwp Sticky Header <= 1.0.8 - CSRF
Slug
sticky-header-on-scroll
Published
2025-02-24
Title
Sticky Header On Scroll <= 1.0 - Missing Authorization
Slug
sticky-menu-block
Published
2025-02-22
Title
Sticky Content < 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
sticky-menu-or-anything-on-scroll
Published
2020-09-09
Title
Sticky Menu, Sticky Header (or anything!) on Scroll < 2.21 - CSRF & XSS
Slug
sticky-popup
Published
2022-05-23
Title
Sticky Popup <= 1.2 - Admin+ Stored Cross-Site Scripting
Slug
sticky-related-posts
Published
2021-08-09
Title
Titan Framework <= 1.12.1 - Reflected Cross-Site Scripting (XSS)
Slug
sticky-side-buttons
Published
2025-08-13
Title
Sticky Side Buttons < 2.0.0 - Admin+ Stored XSS
Slug
sticky-social-bar
Published
2024-11-01
Title
Sticky Social Bar <= 2.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
sticky-social-icons
Published
2024-11-15
Title
Sticky Social Icons <= 1.2.1 - Admin+ Stored XSS
Slug
sticky-social-icons
Published
2024-11-20
Title
Sticky Social Icons <= 1.2.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
sticky-social-link
Published
2024-05-07
Title
Sticky Social Link <= 2.0.1 - Admin+ Stored XSS
Slug
stitch-express
Published
2026-08-19
Title
Stitch Express <= 1.9.1 - Missing Authorization
Slug
stklcode-liveticker
Published
2025-02-11
Title
Liveticker (by stklcode) < 1.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
stm-gallery
Published
2026-01-06
Title
STM Gallery 1.9 <= 0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
Slug
stm-megamenu
Published
2024-06-05
Title
MegaMenu < 2.3.13 - Unauthenticated Local File Inclusion
Slug
stm-motors-events
Published
2025-06-03
Title
Motors - Events <= 1.4.7 - Unauthenticated Local File Inclusion
Slug
stock-exporter-for-woocommerce
Published
2023-08-16
Title
Stock Exporter for WooCommerce < 1.2.0 - Reflected XSS
Slug
stock-in
Published
2021-06-02
Title
Stock in & out <= 1.0.4 - Authenticated SQL Injection