Extension WordPress
Vulnérabilités WP CTA – Call Now Button, Sticky Button & Call to Action Builder
Cette page rassemble les failles publiées pour WP CTA – Call Now Button, Sticky Button & Call to Action Builder, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de WP CTA – Call Now Button, Sticky Button & Call to Action Builder
7 fiches
WP CTA <= 2.2.2 – Unauthenticated Time-Based Blind SQL Injection via 'fildname' Parameter
The WP CTA – Sticky CTA Builder, Generate Leads, Promote Sales plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'fildname' parameter in all versions up to, and including, 2.2.2. This is due to insufficient…
*-2.2.2
2.3.0
10/07/2026
WP CTA – Sticky CTA Builder, Generate Leads, Promote Sales <= 2.1.2 – Missing Authorization
The WP CTA – Sticky CTA Builder, Generate Leads, Promote Sales plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in versions up to, and including, 2.1.2. This makes it…
*-2.1.2
2.1.3
03/03/2026
WP CTA – Call To Action Plugin, Sticky CTA, Sticky Buttons <= 1.7.0 – Missing Authorization to Unauthenticated Sticky Status Update
The WP CTA – Call To Action Plugin, Sticky CTA, Sticky Buttons plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'update_cta_status' and 'change_sticky_sidebar_name' functions in all versions up…
*-1.7.0
1.7.1
01/08/2025
WordPress CTA <= 1.7.0 – Cross-Site Request Forgery
The WP CTA – Call To Action Plugin, Sticky CTA, Sticky Buttons plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.7.0. This is due to missing or incorrect nonce validation…
*-1.7.0
1.7.1
27/06/2025
WordPress CTA <= 1.5.8 – Missing Authorization via Multiple AJAX Actions
The WordPress CTA plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on multiple AJAX actions in versions up to, and including, 1.5.8. This makes it possible for unauthenticated attackers to…
*-1.5.8
1.5.9
25/10/2023
Appsero <= 1.2.1 – Missing Authorization
The Appsero analytics tool used in several plugins is vulnerable to authorization bypass due to a missing capability check on the uninstall_reason_submission function used for feedback submission in versions up to, and including, 1.2.1. This makes it possible…
*-1.5.8
1.5.9
16/12/2022
Appsero <= 1.2.0 – Cross-Site Request Forgery
The Appsero analytics tool used in several plugins is vulnerable to Cross-Site Request Forgery due to a missing nonce check on the uninstall_reason_submission function used for feedback submission in versions up to, and including, 1.2.0. This makes it…
*-1.5.8
1.5.9
14/12/2022
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.