Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Vendor: blendmedia Clear all filters
TI-2026-05337 CVE-2026-6089 · GHSA-7hj5-j6jm-q3vw

WP CTA <= 2.1.2 - Authenticated (Administrator+) Server-Side Request Forgery

Priority LOW 23

The WP CTA plugin for WordPress is vulnerable to Server-Side Request Forgery via the 'sticky_s_media' parameter in imported JSON files in all versions up to, and including, 2.1.2.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00483 Published 2026-07-29 No fix listed CWE-918
TI-2026-18040 CVE-2026-22459 · GHSA-5h47-h8xp-49rq

WordPress WordPress CTA plugin <= 2.1.2 - Broken Access Control vulnerability

Priority LOW 35

Missing Authorization vulnerability in Blend Media WordPress CTA easy-sticky-sidebar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WordPress CTA: from n/a through <= 2.1.2.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.0037 Published 2026-03-05 No fix listed CWE-862
TI-2025-07457 CVE-2025-8152 · GHSA-vrcj-8r35-5gqx

Missing authorization in blendmedia WP CTA – Call Now Button, Sticky Button & Call to…

Priority LOW 30

The WP CTA – Call To Action Plugin, Sticky CTA, Sticky Buttons plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'update_cta_status' and 'change_sticky_sideb…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00334 Published 2025-08-02 No fix listed CWE-862
TI-2025-33237 CVE-2025-53270 · GHSA-9qrq-ccwf-rp74

WordPress CTA plugin <= 1.7.0 - Cross Site Request Forgery (CSRF) Vulnerability

Priority LOW 19

Cross-Site Request Forgery (CSRF) vulnerability in Blend Media WordPress CTA easy-sticky-sidebar allows Cross Site Request Forgery.This issue affects WordPress CTA: from n/a through <= 1.7.0.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00149 Published 2025-06-27 No fix listed CWE-352