Extension WordPress
Vulnérabilités Sticky Buttons – Floating Buttons Builder
Cette page rassemble les failles publiées pour Sticky Buttons – Floating Buttons Builder, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Sticky Buttons – Floating Buttons Builder
4 fiches
Sticky Buttons <= 4.1.1 – Cross-Site Request Forgery to Settings Update
The Sticky Buttons plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.1.1. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers…
*-4.1.1
4.1.2
24/01/2025
Sticky Buttons – floating buttons builder <= 3.2.3 – Cross-Site Request Forgery
The Sticky Buttons – floating buttons builder plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.2.3. This is due to missing or incorrect nonce validation on the sticky-buttons page. This…
*-3.2.3
3.2.4
11/04/2024
Sticky Buttons <= 3.2.2 – Authenticated (Admin+) Stored Cross-Site Scripting
The Sticky Buttons – floating buttons builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via sticky URLs in all versions up to, and including, 3.2.2 due to insufficient input sanitization and output escaping. This makes it…
*-3.2.2
3.2.3
22/01/2024
Multiple Wow-Company Plugins (Various Versions) — Reflected Cross-Site Scripting via 'page' parameter
Several plugins by Wow-Company are vulnerable to Reflected Cross-Site Scripting via the ‘page’ parameter in various versions due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in…
*-3.1.0
3.1.1
22/05/2023
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.