Skip to content
Noroxi

WordPress CTA

easy-sticky-sidebar · plugin

Known security vulnerabilities for WordPress CTA. Find out in seconds which version runs on your site with WP Lens.

6 known vulnerabilities

latest Jul 29, 2026

Vulnerabilities

  • CVE-2026-4661

    WP CTA <= 2.2.2 - Unauthenticated Time-Based Blind SQL Injection via 'fildname' Parameter

    High 7.5

  • CVE-2026-22459

    WordPress WordPress CTA plugin <= 2.1.2 - Broken Access Control vulnerability

    Medium 6.5

  • CVE-2023-46644

    WordPress WordPress CTA plugin <= 1.5.8 - Broken Access Control vulnerability

    Medium 6.5

  • CVE-2025-8152

    WP CTA – Call To Action Plugin, Sticky CTA, Sticky Buttons <= 1.7.0 - Missing Authorization to Unauthenticated Sticky Status Update

    Medium 5.3

  • CVE-2026-6089

    WP CTA <= 2.1.2 - Authenticated (Administrator+) Server-Side Request Forgery

    Medium 4.9

  • CVE-2025-53270

    WordPress CTA plugin <= 1.7.0 - Cross Site Request Forgery (CSRF) Vulnerability

    Medium 4.3

← Back to directory