CVE-2025-27356

Missing Authorization vulnerability in Hardik Sticky Header On Scroll sticky-header-on-scroll allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sticky Header On Scroll: from n/a through = 1.0...

WordPress Sticky Header On Scroll plugin <= 1.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin Sticky Header On Scroll versions = 1.0...

CVE-2025-27356 WordPress Sticky Header On Scroll plugin <= 1.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in Hardik Sticky Header On Scroll sticky-header-on-scroll allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sticky Header On Scroll: from n/a through = 1.0...

CVE-2025-27356

CVE-2025-27356 is a Missing Authorization vulnerability affecting the WordPress plugin “Sticky Header On Scroll” versions up to 1.0, per Patchstack and CVE records. The underlying issue is broken access control/incorrectly configured access levels, which could allow unauthorized access or actions...

CVE-2025-27356 WordPress Sticky Header On Scroll plugin <= 1.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in Hardik Sticky Header On Scroll sticky-header-on-scroll allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sticky Header On Scroll: from n/a through = 1.0...

CVE-2025-27356: Missing Authorization

Missing Authorization vulnerability in Hardik Sticky Header On Scroll sticky-header-on-scroll allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sticky Header On Scroll: from n/a through = 1.0...

PT-2025-7768

Name of the Vulnerable Software and Affected Versions Sticky Header On Scroll versions 1.0 and earlier Description The issue is related to a Missing Authorization vulnerability, which allows exploitation due to incorrectly configured access control security levels. Recommendations For Sticky Head...

WordPress plugin Sticky Header On Scroll 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

WordPress Sticky Content plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Logan Cote Patchstack Alliance in WordPress Plugin Sticky Content versions = 1.0.1...

CVE-2024-30551

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Toast Plugins Sticky Anything.This issue affects Sticky Anything: from n/a through 2.1.5...

CVE-2024-10803

The MP3 Sticky Player plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 8.0 via the content/downloader.php file. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive...

CVE-2024-51699

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Buooy Buooy Sticky Header buooy-sticky-header allows Reflected XSS.This issue affects Buooy Sticky Header: from n/a through = 0.5.2...

CVE-2024-51631

Cross-Site Request Forgery CSRF vulnerability in Md Eftakhairul Islam Sticky Social Bar sticky-social-bar allows Cross Site Request Forgery.This issue affects Sticky Social Bar: from n/a through = 2.0...

CVE-2024-33646

Cross-Site Request Forgery CSRF vulnerability in Toast Plugins Sticky Anything allows Cross-Site Scripting XSS.This issue affects Sticky Anything: from n/a through 2.1.5...

CVE-2025-24720

Cross-Site Request Forgery CSRF vulnerability in Wow-Company Sticky Buttons sticky-buttons allows Cross Site Request Forgery.This issue affects Sticky Buttons: from n/a through = 4.1.1...

CVE-2025-24720

CVE-2025-24720 describes a Cross-Site Request Forgery (CSRF) to Settings Update vulnerability in the WordPress plugin Sticky Buttons (Wow-Company), affecting versions through 4.1.1. The initial description and multiple security trackers corroborate the CSRF flaw, with references noting impact to ...

CVE-2025-24720 WordPress Sticky Buttons Plugin <= 4.1.1 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability

Cross-Site Request Forgery CSRF vulnerability in Wow-Company Sticky Buttons allows Cross Site Request Forgery. This issue affects Sticky Buttons: from n/a through 4.1.1...

WordPress Sticky Buttons Plugin <= 4.1.1 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability

Cross Site Request Forgery CSRF to Settings Change vulnerability discovered by Khang Duong in WordPress Plugin Sticky Buttons versions = 4.1.1...

CVE-2025-23839

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Asif Shakeel Sticky Button sticky-chat-button allows Stored XSS.This issue affects Sticky Button: from n/a through = 1.0...

CVE-2025-23839 WordPress Sticky Button plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Asif Shakeel Sticky Button sticky-chat-button allows Stored XSS.This issue affects Sticky Button: from n/a through = 1.0...