Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: premio Component: My Sticky Bar Clear all filters
TI-2024-02459 CVE-2024-2643 · GHSA-gw62-7pm8-x49v

My Sticky Bar < 2.6.8 - Admin+ Stored XSS

Priority MEDIUM 55

The Floating Notification Bar, Sticky Menu on Scroll, Announcement Banner, and Sticky Header for Any WordPress plugin before 2.6.8 does not sanitise and escape some of its settings, which could allow high privilege users…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00355 Published 2025-05-15 Fixed in 2.6.8 CWE-79
TI-2024-06602 CVE-2024-7133 · GHSA-gx3x-w926-g8pm

My Sticky Bar < 2.7.3 - Admin+ Stored XSS

Priority MEDIUM 55

The Floating Notification Bar, Sticky Menu on Scroll, Announcement Banner, and Sticky Header for Any WordPress plugin before 2.7.3 does not validate and escape some of its settings before outputting them back in the page…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00438 Published 2024-09-13 Fixed in 2.7.3 CWE-79
TI-2024-03810 CVE-2024-4090 · GHSA-fgw8-wccj-749x

My Sticky Bar < 2.7.2 - Admin+ Stored XSS

Priority MEDIUM 55

The Floating Notification Bar, Sticky Menu on Scroll, Announcement Banner, and Sticky Header for Any WordPress plugin before 2.7.2 does not sanitise and escape some of its settings, which could allow high privilege users…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00455 Published 2024-08-01 Fixed in 2.7.2 CWE-79