Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: gingerplugins Clear all filters
TI-2026-13006 CVE-2026-15462 · GHSA-x4cw-pxp4-3x6g

Sticky Chat Widget <= 1.4.2 - Unauthenticated SQL Injection

Priority LOW 39

The Sticky Chat Widget plugin for WordPress is vulnerable to SQL Injection via the 'scw_form_fields' parameter array keys of the 'scw_save_form_data' AJAX action in versions up to, and including, 1.4.2.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00505 Published 2026-09-11 No fix listed CWE-89
TI-2025-22773 CVE-2025-31610 · GHSA-qw8r-mf6v-692x

Cross-site scripting in gingerplugins Notification Bar, Sticky Notification Bar, Sticky…

Priority LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in gingerplugins Notification Bar, Sticky Notification Bar, Sticky Welcome Bar for any theme gp-notification-bar allows S…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00218 Published 2025-03-31 No fix listed CWE-79
TI-2023-28019 CVE-2023-51361 · GHSA-599q-hh25-4x9m

WordPress Sticky Chat Widget Plugin <= 1.1.8 is vulnerable to Cross Site Scripting (XSS)

Priority LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ginger Plugins Sticky Chat Widget: Click to chat, SMS, Email, Messages, Call Button, Live Chat and Live Support Button…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00335 Published 2023-12-29 No fix listed CWE-79