CVE-2024-5765

The WpStickyBar WordPress plugin (versions prior to 2.1.1 ) is vulnerable to SQL injection because it fails to properly sanitize or escape a parameter used in a SQL statement. This flaw is triggered via an AJAX action accessible to unauthenticated users . Impacted systems may allow attackers to e...

CVE-2024-6226

The WpStickyBar WordPress plugin (versions prior to 2.1.1 , including through 2.1.0) is vulnerable to Reflected Cross-Site Scripting (XSS) . The root cause is the failure to properly sanitise and escape a parameter before it is outputted back onto the page. This flaw could be exploited to target ...