Read the docs

gingerplugins

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

gingerplugins records in CISA KEV

No gingerplugins vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Sticky Chat Widget 1 record LOW

Records

4 records

TI-2026-13006 CVE-2026-15462 · GHSA-x4cw-pxp4-3x6g

Sticky Chat Widget <= 1.4.2 - Unauthenticated SQL Injection

Priority LOW 39

The Sticky Chat Widget plugin for WordPress is vulnerable to SQL Injection via the 'scw_form_fields' parameter array keys of the 'scw_save_form_data' AJAX action in versions up to, and including, 1.4.2.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00505 Published 2026-09-11 No fix listed CWE-89
TI-2025-22773 CVE-2025-31610 · GHSA-qw8r-mf6v-692x

Cross-site scripting in gingerplugins Notification Bar, Sticky Notification Bar, Sticky…

Priority LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in gingerplugins Notification Bar, Sticky Notification Bar, Sticky Welcome Bar for any theme gp-notification-bar allows S…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00218 Published 2025-03-31 No fix listed CWE-79
TI-2023-28019 CVE-2023-51361 · GHSA-599q-hh25-4x9m

WordPress Sticky Chat Widget Plugin <= 1.1.8 is vulnerable to Cross Site Scripting (XSS)

Priority LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ginger Plugins Sticky Chat Widget: Click to chat, SMS, Email, Messages, Call Button, Live Chat and Live Support Button…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00335 Published 2023-12-29 No fix listed CWE-79
Open these records in search →