CVE-2024-7133

CVE-2024-7133 affects the WordPress plugin My Sticky Bar (and related descriptions refer to the Floating Notification Bar/Sticky Bar settings) for versions before 2.7.3 . The root cause is failure to validate and escape certain plugin settings before outputting them in the page, enabling stored X...

CVE-2024-2643

The My Sticky Bar (also known as Floating Notification Bar, Sticky Menu on Scroll, Announcement Banner, and Sticky Header for Any) WordPress plugin versions before 2.6.8 is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is the failure to properly sanitize and escape certain plug...

CVE-2024-4090

The My Sticky Bar (also known as The Floating Notification Bar, Sticky Menu on Scroll, Announcement Banner, and Sticky Header for Any ) WordPress plugin versions prior to 2.7.2 is vulnerable to a Stored Cross-Site Scripting (XSS) attack. The root cause is a failure to properly sanitize and escape...

CVE-2023-7048

CVE-2023-7048 affects the WordPress plugin My Sticky Bar (formerly myStickymenu) up to version 2.6.6. The issue is a Cross-Site Request Forgery caused by missing/incorrect nonce validation in mystickymenu-contact-leads.php, enabling unauthenticated attackers to trigger a CSV export containing con...