Skip to content

Premio vulnerabilities

Products

Newest

premio floating chat widget: contact chat icons, telegram chat, line messenger, wechat, email, sms, call button – chaty Floating Chat Widget: Contact Chat Icons, Telegram Chat, Line Messenger, WeChat, Email, SMS, Call Button <= 3.5.9 - Reflected Cross-Site Scripting CVE-2026-18964 6.1 MediumSeptember 11, 2026
notfound chaty pro WordPress Chaty Pro plugin <= 3.5.8 - Cross Site Scripting (XSS) vulnerability CVE-2026-73360 7.1 HighAugust 18, 2026
premio my sticky bar – floating notification bar & sticky header (formerly mystickymenu) My Sticky Bar <= 2.8.6 - Unauthenticated SQL Injection via 'stickymenu_contact_lead_form' Action CVE-2026-3657 7.5 HighMarch 12, 2026
premio chaty WordPress Chaty plugin <= 3.5.1 - Sensitive Data Exposure vulnerability CVE-2026-27370 7.5 HighMarch 5, 2026
galdub folders – unlimited folders to organize media library folder, pages, posts, file manager Folders – Unlimited Folders to Organize Media Library Folder, Pages, Posts, File Manager <= 3.1.5 - Missing Authorization to Authenticated (Author+) Media Replacement CVE-2025-12640 4.3 MediumJanuary 8, 2026
galdub all-in-one sticky floating contact form, call, click to chat, and 50+ social icon tabs – my sticky elements My Sticky Elements <= 2.3.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Bulk Lead Deletion CVE-2025-14428 4.3 MediumJanuary 1, 2026
gal dubinski my sticky elements WordPress My Sticky Elements plugin <= 2.3.3 - Broken Access Control vulnerability CVE-2025-68995 4.3 MediumDecember 30, 2025
gal dubinski stars testimonials WordPress Stars Testimonials plugin <= 3.3.4 - Cross Site Scripting (XSS) vulnerability CVE-2025-67912 6.5 MediumDecember 16, 2025
galdub folders – unlimited folders to organize media library folder, pages, posts, file manager Folders <= 3.1.5 - Incorrect Authorization to Authenticated (Contributor+) Folder Content Manipulation CVE-2025-12971 4.3 MediumNovember 27, 2025
premio my sticky bar, unknown floating notification bar, sticky menu on scroll, announcement banner, and sticky header for any theme +1 more My Sticky Bar < 2.6.8 - Admin+ Stored XSS CVE-2024-2643 4.8 MediumMay 15, 2025
premio floating chat widget, floating chat widget: contact chat icons, telegram chat, line messenger, wechat, email, sms, call button – chaty +1 more Floating Chat Widget: Contact Chat Icons, Telegram Chat, Line Messenger, WeChat, Email, SMS, Call Button, WhatsApp – Chaty <= 3.3.5 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting CVE-2025-1450 6.4 MediumFebruary 27, 2025
premio coupon x – discount popups & promo codes pop ups for woocommerce Coupon X: Discount Pop Up, Promo Code Pop Ups, Announcement Pop Up, WooCommerce Popups <= 1.3.5 - Missing Authorization CVE-2024-12204 5.4 MediumJanuary 11, 2025
premio coupon x – discount popups & promo codes pop ups for woocommerce Coupon X: Discount Pop Up, Promo Code Pop Ups, Announcement Pop Up, WooCommerce Popups <= 1.3.5 - Missing Authorization to Authenticated (Contributor+) PHP Object Injection CVE-2024-12627 7.5 HighJanuary 11, 2025
gal dubinski my sticky elements, premio all in one floating contact form my sticky elements +1 more WordPress myStickyElements plugin <= 2.1.3 - Broken Access Control vulnerability CVE-2023-51362 5.3 MediumDecember 9, 2024
premio testimonials, stars testimonials — responsive reviews & star ratings +1 more Free Responsive Testimonials, Social Proof Reviews, and Customer Reviews – Stars Testimonials <= 3.3.3 - Authenticated (Contributor+) Local File Inclusion CVE-2024-11429 8.8 HighDecember 5, 2024
premio stars testimonials — responsive reviews & star ratings Stars Testimonials <= 3.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via stars_testimonials Shortcode CVE-2024-8989 6.4 MediumOctober 1, 2024
premio my sticky bar, unknown floating notification bar, sticky menu on scroll, announcement banner, and sticky header for any theme +1 more My Sticky Bar < 2.7.3 - Admin+ Stored XSS CVE-2024-7133 4.8 MediumSeptember 13, 2024
galdub folders – unlimited folders to organize media library folder, pages, posts, file manager, premio folders +1 more Folders – Unlimited Folders to Organize Media Library Folder, Pages, Posts, File Manager <= 3.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via SVG File Upload CVE-2024-7317 6.4 MediumAugust 6, 2024
premio my sticky bar, unknown floating notification bar, sticky menu on scroll, announcement banner, and sticky header for any theme +1 more My Sticky Bar < 2.7.2 - Admin+ Stored XSS CVE-2024-4090 4.8 MediumAugust 1, 2024
premio folders pro Folders Pro <= 3.0.2 - Authenticated(Author+) Arbitrary File Upload via handle_folders_file_upload CVE-2024-2024 8.8 HighJune 14, 2024
premio folders, folders pro, galdub folders – unlimited folders to organize media library folder, pages, posts, file manager +2 more Folders <= 3.0 and Folders Pro <= 3.0.2 - Directory Traversal via handle_folders_file_upload CVE-2024-2023 4.3 MediumJune 14, 2024
premio floating chat widget, unknown floating chat widget: contact chat icons, whatsapp, telegram chat, line messenger, wechat, email, sms, call button, premio chaty +2 more Floating Chat Widget < 3.2.3 - Admin+ Stored XSS CVE-2024-4149 4.8 MediumJune 13, 2024
galdub folders – unlimited folders to organize media library folder, pages, posts, file manager Folders Pro <= 3.0.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via User First Name and Last Name CVE-2024-3868 5.4 MediumMay 4, 2024
premio floating chat widget, unknown floating chat widget: contact chat icons, whatsapp, telegram chat, line messenger, wechat, email, sms, call button +1 more Floating Chat Widget < 3.1.9 - Editor+ Stored XSS CVE-2024-2972 3.8 LowApril 24, 2024
premio my sticky bar, my sticky bar – floating notification bar & sticky header (formerly mystickymenu) +1 more My Sticky Bar <= 2.6.6 - Cross-Site Request Forgery to Sensitive Information Exposure CVE-2023-7048 3.1 LowJanuary 11, 2024
galdub folders – unlimited folders to organize media library folder, pages, posts, file manager, premio folders +1 more WordPress Folders Plugin <= 2.9.2 is vulnerable to Arbitrary File Upload CVE-2023-40204 9.1 CriticalDecember 20, 2023
premio chaty WordPress Chaty plugin <= 3.1.2 - Cross Site Scripting (XSS) vulnerability CVE-2023-47759 5.9 MediumNovember 22, 2023
premio mystickymenu, unknown floating notification bar, sticky menu on scroll, announcement banner, and sticky header for any theme +1 more myStickymenu < 2.6.5 - Subscriber+ Arbitrary Form Leads Deletion CVE-2023-5509 5.4 MediumNovember 20, 2023
premio chaty WordPress Chaty Plugin <= 3.0.9 is vulnerable to Cross Site Scripting (XSS) CVE-2023-25019 7.1 HighAugust 30, 2023
premio my sticky elements, unknown all-in-one floating contact form, call, chat, and 50+ social icon tabs +1 more All-in-one Floating Contact Form < 2.1.2 - Admin+ Stored Cross-Site Scripting CVE-2023-3248 4.8 MediumJuly 24, 2023
premio chaty, unknown floating chat widget: contact chat icons, telegram chat, line messenger, wechat, email, sms, call button +1 more Floating Chat Widget < 3.1.2 - Admin+ Stored Cross-Site Scripting CVE-2023-3245 4.8 MediumJuly 17, 2023
premio my sticky elements, unknown all-in-one floating contact form, call, chat, and 50+ social icon tabs +1 more My Sticky Elements < 2.0.9 - Admin+ SQLi CVE-2023-0487 7.2 HighFebruary 27, 2023
premio chaty, unknown floating chat widget: contact chat icons, telegram chat, line, wechat, email, sms, call button +1 more Chaty < 3.0.3 - Admin+ SQLi CVE-2022-3858 7.2 HighDecember 5, 2022
premio chaty, chaty (wordpress plugin) +1 more WordPress Chaty plugin <= 2.8.3 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability CVE-2021-36846 4.8 MediumApril 11, 2022
premio mystickyelements, unknown all-in-one floating contact form, call, chat, and 50+ social icon tabs – my sticky elements +1 more All-in-one Floating Contact Form < 2.0.4 - Authenticated Reflected Cross-Site Scripting (XSS) CVE-2022-0148 5.4 MediumFebruary 7, 2022
premio chaty, chaty pro, unknown floating chat widget pro - chaty pro +1 more +3 more Chaty < 2.8.3 - Reflected Cross-Site Scripting CVE-2021-25016 6.1 MediumJanuary 3, 2022
premio mystickymenu, unknown floating notification bar, sticky menu on scroll, and sticky header for any theme – mystickymenu +1 more myStickymenu < 2.5.2 - Authenticated Stored XSS CVE-2021-24425 4.8 MediumAugust 2, 2021