Premio vulnerabilities
We track 7 vulnerabilities in Premio products across 9 products. 7 are rated high or critical, and none are known to be exploited. The most recent was published on March 12, 2026.
Latest Premio vulnerabilities
- 7.5 High severity
My Sticky Bar – Floating Notification Bar &…: Improper Neutralization of Special Elements used in an SQL Command
The My Sticky Bar plugin for WordPress is vulnerable to SQL injection via the `stickymenu_contact_lead_form` AJAX action in all versions up to, and including, 2.8.6. This is due to the handler using attacker-controlled POST parameter names directly as SQL colu
- 7.5 High severity
Chaty: Insertion of Sensitive Information Into Sent Data
Insertion of Sensitive Information Into Sent Data vulnerability in Premio Chaty chaty allows Retrieve Embedded Sensitive Data.This issue affects Chaty: from n/a through <= 3.5.1.
- 7.5 High severity
Coupon X – Discount Popups & Promo Codes Pop…: Deserialization of Untrusted Data
The Coupon X: Discount Pop Up, Promo Code Pop Ups, Announcement Pop Up, WooCommerce Popups plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.3.5 via deserialization of untrusted input from post content passed to
- 8.8 High severity
Stars Testimonials — Responsive Reviews & Star…: Improper Control of Filename for Include/Require Statement in PHP Program
The Free Responsive Testimonials, Social Proof Reviews, and Customer Reviews – Stars Testimonials plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.3.3 via the 'stars-testimonials-with-slider-and-masonry-grid' s
- 8.8 High severity
Folders Pro: Improper Limitation of a Pathname to a Restricted Directory
The Folders Pro plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'handle_folders_file_upload' function in all versions up to, and including, 3.0.2. This makes it possible for authenticated attackers, with
- 7.2 High severity
Folders – Unlimited Folders to Organize Media…: Unrestricted Upload of File with Dangerous Type
Unrestricted Upload of File with Dangerous Type vulnerability in Premio Folders – Unlimited Folders to Organize Media Library Folder, Pages, Posts, File Manager.This issue affects Folders – Unlimited Folders to Organize Media Library Folder, Pages, Posts, File
- 7.2 High severity
All-in-one Floating Contact Form, Call, Chat…: Improper Neutralization of Special Elements used in an SQL Command
The My Sticky Elements WordPress plugin before 2.0.9 does not properly sanitise and escape a parameter before using it in a SQL statement when deleting messages, leading to a SQL injection exploitable by high privilege users such as admin