Extension WordPress
Vulnérabilités My Sticky Bar – Floating Notification Bar & Sticky Header (formerly myStickymenu)
Cette page rassemble les failles publiées pour My Sticky Bar – Floating Notification Bar & Sticky Header (formerly myStickymenu), leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de My Sticky Bar – Floating Notification Bar & Sticky Header (formerly myStickymenu)
6 fiches
My Sticky Bar <= 2.8.6 – Unauthenticated SQL Injection via 'stickymenu_contact_lead_form' Action
The My Sticky Bar plugin for WordPress is vulnerable to SQL injection via the `stickymenu_contact_lead_form` AJAX action in all versions up to, and including, 2.8.6. This is due to the handler using attacker-controlled POST parameter names directly as…
*-2.8.6
2.8.7
11/03/2026
My Sticky Bar <= 2.7.2 – Authenticated (Admin+) Stored Cross-Site Scripting
The Floating Notification Bar, Sticky Menu on Scroll, Announcement Banner, and Sticky Header for Any Theme – My Sticky Bar (formerly myStickymenu) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up…
*-2.7.2
2.7.3
23/08/2024
My Sticky Bar (formerly myStickymenu) <= 2.7.1 – Authenticated (Admin+) Stored Cross-Site Scripting
The Floating Notification Bar, Sticky Menu on Scroll, Announcement Banner, and Sticky Header for Any Theme – My Sticky Bar (formerly myStickymenu) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up…
*-2.7.1
2.7.2
11/07/2024
My Sticky Bar <= 2.6.6 – Cross-Site Request Forgery to Sensitive Information Exposure
The My Sticky Bar plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.6.6. This is due to missing or incorrect nonce validation in mystickymenu-contact-leads.php. This makes it possible for unauthenticated…
*-2.6.6
2.6.7
03/01/2024
myStickymenu <= 2.6.4 – Missing Authorization to Authenticated (Subscriber+) Arbitrary Form Lead Deletion
The Floating Notification Bar, Sticky Menu on Scroll, Announcement Banner, and Sticky Header for Any Theme – My Sticky Bar (formerly myStickymenu) plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check…
*-2.6.4
2.6.5
27/10/2023
myStickymenu <= 2.5.1 – Authenticated Stored Cross-Site Scripting
The Floating Notification Bar, Sticky Menu on Scroll, and Sticky Header for Any Theme – myStickymenu WordPress plugin before 2.5.2 does not sanitise or escape its Bar Text settings, allowing hight privilege users to use malicious JavaScript in…
[*, 2.5.2)
2.5.2
21/06/2021
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.