Read the docs

blendmedia

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

blendmedia records in CISA KEV

No blendmedia vulnerabilities are listed in CISA KEV.

Records

5 records

TI-2026-18040 CVE-2026-22459 · GHSA-5h47-h8xp-49rq

WordPress WordPress CTA plugin <= 2.1.2 - Broken Access Control vulnerability

Priority LOW 35

Missing Authorization vulnerability in Blend Media WordPress CTA easy-sticky-sidebar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WordPress CTA: from n/a through <= 2.1.2.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.0037 Published 2026-03-05 No fix listed CWE-862
TI-2025-07457 CVE-2025-8152 · GHSA-vrcj-8r35-5gqx

Missing authorization in blendmedia WP CTA – Call Now Button, Sticky Button & Call to…

Priority LOW 30

The WP CTA – Call To Action Plugin, Sticky CTA, Sticky Buttons plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'update_cta_status' and 'change_sticky_sideb…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00334 Published 2025-08-02 No fix listed CWE-862
TI-2026-05337 CVE-2026-6089 · GHSA-7hj5-j6jm-q3vw

WP CTA <= 2.1.2 - Authenticated (Administrator+) Server-Side Request Forgery

Priority LOW 23

The WP CTA plugin for WordPress is vulnerable to Server-Side Request Forgery via the 'sticky_s_media' parameter in imported JSON files in all versions up to, and including, 2.1.2.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00483 Published 2026-07-29 No fix listed CWE-918
TI-2025-33237 CVE-2025-53270 · GHSA-9qrq-ccwf-rp74

WordPress CTA plugin <= 1.7.0 - Cross Site Request Forgery (CSRF) Vulnerability

Priority LOW 19

Cross-Site Request Forgery (CSRF) vulnerability in Blend Media WordPress CTA easy-sticky-sidebar allows Cross Site Request Forgery.This issue affects WordPress CTA: from n/a through <= 1.7.0.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00149 Published 2025-06-27 No fix listed CWE-352
Open these records in search →