CyberSecBulletin

Sticky Buttons vulnerabilities

We track 1 vulnerability in Sticky Buttons products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on May 2, 2024.

1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score

Latest Sticky Buttons vulnerabilities

  • 7.5 High severity

    Sticky Buttons: Cross-Site Request Forgery

    CVE-2024-3475Sticky Buttons

    The Sticky Buttons WordPress plugin before 3.2.4 does not have CSRF checks in some bulk actions, which could allow attackers to make logged in admins perform unwanted actions, such as deleting buttons via CSRF attacks