Read the docs

premio

Records37All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high9CVSS 7.0–8.9

Exploited now

premio records in CISA KEV

No premio vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Chaty 6 records HIGH My Sticky Bar 4 records MEDIUM Floating Chat Widget 3 records MEDIUM Folders 2 records MEDIUM My Sticky Elements 2 records HIGH Mystickymenu 2 records LOW Chaty Pro 1 record LOW Mystickyelements 1 record LOW

Records

2 records in Mystickymenu · all components

TI-2023-05071 CVE-2023-5509 · GHSA-xvc2-6386-99x8

myStickymenu < 2.6.5 - Subscriber+ Arbitrary Form Leads Deletion

Priority LOW 25

The myStickymenu WordPress plugin before 2.6.5 does not adequately authorize some ajax calls, allowing any logged-in user to perform the actions.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.0052 Published 2023-11-20 Fixed in 2.6.5 CWE-863
TI-2021-06715 CVE-2021-24425 · GHSA-fc78-8j4r-qq56

myStickymenu < 2.5.2 - Authenticated Stored XSS

Priority LOW 23

The Floating Notification Bar, Sticky Menu on Scroll, and Sticky Header for Any Theme – myStickymenu WordPress plugin before 2.5.2 does not sanitise or escape its Bar Text settings, allowing hight privilege users to use…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00626 Published 2021-08-02 Fixed in 2.5.2 CWE-79
Open these records in search →