Skip to content
Noroxi

premio records

23 published records for vendor premio.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
43.5%
Median publish → KEV
No record has entered KEV

Records by year

  1. 21
  2. 22
  3. 23
  4. 24
  5. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

23 records
  • CVE-2024-11429
    35Monitor

    Free Responsive Testimonials, Social Proof Reviews, and Customer Reviews – Stars Testimonials <= 3.3.3 - Authenticated (Contributor+) Local File Inclusion

    HighCVSS 8.8No exploitEPSS 1%

    premio · stars testimonials — responsive reviews & star ratingsDec 5, 2024

  • CVE-2023-0487
    28Monitor

    My Sticky Elements < 2.0.9 - Admin+ SQLi

    HighCVSS 7.2No exploitEPSS 1%

    premio · my sticky elementsFeb 27, 2023

  • CVE-2022-3858
    28Monitor

    Chaty < 3.0.3 - Admin+ SQLi

    HighCVSS 7.2No exploitEPSS 1%

    premio · chatyDec 5, 2022

  • CVE-2023-40204
    28Monitor

    WordPress Folders Plugin <= 2.9.2 is vulnerable to Arbitrary File Upload

    HighCVSS 7.2No exploitEPSS 1%

    premio · foldersDec 20, 2023

  • CVE-2021-25016
    25Monitor

    Chaty < 2.8.3 - Reflected Cross-Site Scripting

    MediumCVSS 6.1Proof of conceptEPSS 2%

    premio · chatyJan 3, 2022

  • CVE-2023-25019
    24Monitor

    WordPress Chaty Plugin <= 3.0.9 is vulnerable to Cross Site Scripting (XSS)

    MediumCVSS 6.1No exploitEPSS 0%

    premio · chatyAug 30, 2023

  • CVE-2022-0148
    21Monitor

    All-in-one Floating Contact Form < 2.0.4 - Authenticated Reflected Cross-Site Scripting (XSS)

    MediumCVSS 5.4Proof of conceptEPSS 2%

    premio · mystickyelementsFeb 7, 2022

  • CVE-2023-5509
    21Monitor

    myStickymenu < 2.6.5 - Subscriber+ Arbitrary Form Leads Deletion

    MediumCVSS 5.4No exploitEPSS 1%

    premio · mystickymenuNov 20, 2023

  • CVE-2023-51362
    21Monitor

    WordPress myStickyElements plugin <= 2.1.3 - Broken Access Control vulnerability

    MediumCVSS 5.3No exploitEPSS 0%

    premio · my sticky elementsDec 9, 2024

  • CVE-2024-7317
    21Monitor

    Folders – Unlimited Folders to Organize Media Library Folder, Pages, Posts, File Manager <= 3.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via

    MediumCVSS 5.4No exploitEPSS 0%

    premio · foldersAug 6, 2024

  • CVE-2025-1450
    21Monitor

    Floating Chat Widget: Contact Chat Icons, Telegram Chat, Line Messenger, WeChat, Email, SMS, Call Button, WhatsApp – Chaty <= 3.3.5 - Authenticated (Contributor

    MediumCVSS 5.4No exploitEPSS 0%

    premio · floating chat widgetFeb 27, 2025

  • CVE-2021-24425
    19Monitor

    myStickymenu < 2.5.2 - Authenticated Stored XSS

    MediumCVSS 4.8No exploitEPSS 1%

    premio · mystickymenuAug 2, 2021

  • CVE-2021-36846
    19Monitor

    WordPress Chaty plugin <= 2.8.3 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

    MediumCVSS 4.8No exploitEPSS 1%

    premio · chatyApr 11, 2022

  • CVE-2023-3248
    19Monitor

    All-in-one Floating Contact Form < 2.1.2 - Admin+ Stored Cross-Site Scripting

    MediumCVSS 4.8No exploitEPSS 0%

    premio · my sticky elementsJul 24, 2023

  • CVE-2023-3245
    19Monitor

    Floating Chat Widget < 3.1.2 - Admin+ Stored Cross-Site Scripting

    MediumCVSS 4.8No exploitEPSS 0%

    premio · chatyJul 17, 2023

  • CVE-2024-4090
    19Monitor

    My Sticky Bar < 2.7.2 - Admin+ Stored XSS

    MediumCVSS 4.8No exploitEPSS 0%

    premio · my sticky barAug 1, 2024

  • CVE-2024-7133
    19Monitor

    My Sticky Bar < 2.7.3 - Admin+ Stored XSS

    MediumCVSS 4.8No exploitEPSS 0%

    premio · my sticky barSep 13, 2024

  • CVE-2024-4149
    19Monitor

    Floating Chat Widget < 3.2.3 - Admin+ Stored XSS

    MediumCVSS 4.8No exploitEPSS 0%

    premio · floating chat widgetJun 13, 2024

  • CVE-2023-47759
    19Monitor

    WordPress Chaty plugin <= 3.1.2 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 4.8No exploitEPSS 0%

    premio · chatyNov 22, 2023

  • CVE-2024-2643
    19Monitor

    My Sticky Bar < 2.6.8 - Admin+ Stored XSS

    MediumCVSS 4.8No exploitEPSS 0%

    premio · my sticky barMay 15, 2025

  • CVE-2024-2023
    17Monitor

    Folders <= 3.0 and Folders Pro <= 3.0.2 - Directory Traversal via handle_folders_file_upload

    MediumCVSS 4.3No exploitEPSS 1%

    premio · folders – unlimited folders to organize media library folder, pages, posts, file managerJun 14, 2024

  • CVE-2023-7048
    17Monitor

    My Sticky Bar <= 2.6.6 - Cross-Site Request Forgery to Sensitive Information Exposure

    MediumCVSS 4.3No exploitEPSS 0%

    premio · my sticky barJan 11, 2024

  • CVE-2024-2972
    15Monitor

    Floating Chat Widget < 3.1.9 - Editor+ Stored XSS

    LowCVSS 3.8No exploitEPSS 0%

    premio · floating chat widgetApr 24, 2024