Login Request a demo
PR
Vendor
Premio
19 products with CVEs on record
48
CVEs
0
On KEV
0
New 30D
Products
CH
Chaty
Premio
7.5
8 CVEs0 on KEV0 new
FU
Folders – Unlimited Folders to Organize Media Library Folder, Pages, Posts, File Manager
premio
7.2
6 CVEs0 on KEV0 new
MS
MY Sticky Bar
Premio
4.8
4 CVEs0 on KEV0 new
MS
My Sticky Elements
Premio
7.2
4 CVEs0 on KEV0 new
FC
Floating Chat Widget
Premio
5.4
3 CVEs0 on KEV0 new
FO
Folders
Premio
7.2
3 CVEs0 on KEV0 new
CP
Chaty Pro
Premio
7.1
2 CVEs0 on KEV0 new
CX
Coupon X – Discount Popups & Promo Codes Pop Ups for WooCommerce
premio
7.5
2 CVEs0 on KEV0 new
FC
Floating Chat Widget: Contact Chat Icons, Telegram Chat, Line Messenger, WeChat, Email, SMS, Call Button – Chaty
premio
6.1
2 CVEs0 on KEV0 new
FP
Folders Pro
Premio
8.8
2 CVEs0 on KEV0 new
MS
My Sticky Bar – Floating Notification Bar & Sticky Header (formerly myStickymenu)
premio
7.5
2 CVEs0 on KEV0 new
MY
Mystickymenu
Premio
5.4
2 CVEs0 on KEV0 new
ST
Stars Testimonials — Responsive Reviews & Star Ratings
premio
8.8
2 CVEs0 on KEV0 new
AI
All IN One Floating Contact Form MY Sticky Elements
Premio
5.3
1 CVEs0 on KEV0 new
AS
All-in-one Sticky Floating Contact Form, Call, Click to Chat, and 50+ Social Icon Tabs – My Sticky Elements
premio
4.3
1 CVEs0 on KEV0 new
CW
Chaty (WordPress plugin)
Premio
4.8
1 CVEs0 on KEV0 new
MY
Mystickyelements
Premio
5.4
1 CVEs0 on KEV0 new
ST
Stars Testimonials
Premio
6.5
1 CVEs0 on KEV0 new
TE
Testimonials
Premio
8.8
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-18964
FC
Floating Chat Widget: Contact Chat Icons, Telegram Chat, Line Messenger, WeChat, Email, SMS, Call Button – Chaty
premio
6.1
0%
Sep 11Floating Chat Widget: Contact Chat Icons, Telegram Chat, Line Messenger, WeChat, Email, SMS, Call Button <= 3.5.9 - Reflected Cross-Site Scripting
CVE-2026-73360
CP
Chaty Pro
Premio
7.1
0%
Aug 18WordPress Chaty Pro plugin <= 3.5.8 - Cross Site Scripting (XSS) vulnerability
CVE-2026-3657
MS
My Sticky Bar – Floating Notification Bar & Sticky Header (formerly myStickymenu)
premio
7.5
0%
Mar 12My Sticky Bar <= 2.8.6 - Unauthenticated SQL Injection via 'stickymenu_contact_lead_form' Action
CVE-2026-27370
CH
Chaty
Premio
7.5
0%
Mar 5WordPress Chaty plugin <= 3.5.1 - Sensitive Data Exposure vulnerability
CVE-2025-12640
FU
Folders – Unlimited Folders to Organize Media Library Folder, Pages, Posts, File Manager
premio
4.3
0%
Jan 8Folders – Unlimited Folders to Organize Media Library Folder, Pages, Posts, File Manager <= 3.1.5 - Missing Authorization to Authenticated (Author+) Media Replacement
CVE-2025-14428
AS
All-in-one Sticky Floating Contact Form, Call, Click to Chat, and 50+ Social Icon Tabs – My Sticky Elements
premio
4.3
0%
Jan 1My Sticky Elements <= 2.3.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Bulk Lead Deletion
CVE-2025-68995
MS
My Sticky Elements
Premio
4.3
0%
Dec 30WordPress My Sticky Elements plugin <= 2.3.3 - Broken Access Control vulnerability
CVE-2025-67912
ST
Stars Testimonials
Premio
6.5
0%
Dec 16WordPress Stars Testimonials plugin <= 3.3.4 - Cross Site Scripting (XSS) vulnerability
CVE-2025-12971
FU
Folders – Unlimited Folders to Organize Media Library Folder, Pages, Posts, File Manager
premio
4.3
0%
Nov 27Folders <= 3.1.5 - Incorrect Authorization to Authenticated (Contributor+) Folder Content Manipulation
CVE-2024-2643
MS
MY Sticky Bar
Premio
4.8
0%
May 15My Sticky Bar < 2.6.8 - Admin+ Stored XSS
CVE-2025-1450
FC
Floating Chat Widget: Contact Chat Icons, Telegram Chat, Line Messenger, WeChat, Email, SMS, Call Button – Chaty
premio
5.4
0%
Feb 27Floating Chat Widget: Contact Chat Icons, Telegram Chat, Line Messenger, WeChat, Email, SMS, Call Button, WhatsApp – Chaty <= 3.3.5 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting
CVE-2024-12204
CX
Coupon X – Discount Popups & Promo Codes Pop Ups for WooCommerce
premio
5.4
0%
Jan 11Coupon X: Discount Pop Up, Promo Code Pop Ups, Announcement Pop Up, WooCommerce Popups <= 1.3.5 - Missing Authorization
CVE-2024-12627
CX
Coupon X – Discount Popups & Promo Codes Pop Ups for WooCommerce
premio
7.5
1%
Jan 11Coupon X: Discount Pop Up, Promo Code Pop Ups, Announcement Pop Up, WooCommerce Popups <= 1.3.5 - Missing Authorization to Authenticated (Contributor+) PHP Object Injection
CVE-2023-51362
MS
My Sticky Elements
Premio
5.3
0%
Dec 9WordPress myStickyElements plugin <= 2.1.3 - Broken Access Control vulnerability
CVE-2024-11429
ST
Stars Testimonials — Responsive Reviews & Star Ratings
premio
8.8
1%
Dec 5Free Responsive Testimonials, Social Proof Reviews, and Customer Reviews – Stars Testimonials <= 3.3.3 - Authenticated (Contributor+) Local File Inclusion
CVE-2024-8989
ST
Stars Testimonials — Responsive Reviews & Star Ratings
premio
6.4
0%
Oct 1Stars Testimonials <= 3.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via stars_testimonials Shortcode
CVE-2024-7133
MS
MY Sticky Bar
Premio
4.8
0%
Sep 13My Sticky Bar < 2.7.3 - Admin+ Stored XSS
CVE-2024-7317
FU
Folders – Unlimited Folders to Organize Media Library Folder, Pages, Posts, File Manager
premio
5.4
0%
Aug 6Folders – Unlimited Folders to Organize Media Library Folder, Pages, Posts, File Manager <= 3.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via SVG File Upload
CVE-2024-4090
MS
MY Sticky Bar
Premio
4.8
0%
Aug 1My Sticky Bar < 2.7.2 - Admin+ Stored XSS
CVE-2024-2024
FP
Folders Pro
Premio
8.8
3%
Jun 14Folders Pro <= 3.0.2 - Authenticated(Author+) Arbitrary File Upload via handle_folders_file_upload
CVE-2024-2023
FU
Folders – Unlimited Folders to Organize Media Library Folder, Pages, Posts, File Manager
premio
4.3
1%
Jun 14Folders <= 3.0 and Folders Pro <= 3.0.2 - Directory Traversal via handle_folders_file_upload
CVE-2024-4149
FC
Floating Chat Widget
Premio
4.8
0%
Jun 13Floating Chat Widget < 3.2.3 - Admin+ Stored XSS
CVE-2024-3868
FU
Folders – Unlimited Folders to Organize Media Library Folder, Pages, Posts, File Manager
premio
5.4
0%
May 4Folders Pro <= 3.0.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via User First Name and Last Name
CVE-2024-2972
FC
Floating Chat Widget
Premio
3.8
0%
Apr 24Floating Chat Widget < 3.1.9 - Editor+ Stored XSS
CVE-2023-7048
MS
My Sticky Bar – Floating Notification Bar & Sticky Header (formerly myStickymenu)
premio
4.3
0%
Jan 11My Sticky Bar <= 2.6.6 - Cross-Site Request Forgery to Sensitive Information Exposure
CVE-2023-40204
FU
Folders – Unlimited Folders to Organize Media Library Folder, Pages, Posts, File Manager
Premio
7.2
1%
Dec 20WordPress Folders Plugin <= 2.9.2 is vulnerable to Arbitrary File Upload
CVE-2023-47759
CH
Chaty
Premio
4.8
0%
Nov 22WordPress Chaty plugin <= 3.1.2 - Cross Site Scripting (XSS) vulnerability
CVE-2023-5509
MY
Mystickymenu
Premio
5.4
1%
Nov 20myStickymenu < 2.6.5 - Subscriber+ Arbitrary Form Leads Deletion
CVE-2023-25019
CH
Chaty
Premio
6.1
0%
Aug 30WordPress Chaty Plugin <= 3.0.9 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-3248
MS
MY Sticky Elements
Premio
4.8
0%
Jul 24All-in-one Floating Contact Form < 2.1.2 - Admin+ Stored Cross-Site Scripting
CVE-2023-3245
CH
Chaty
Premio
4.8
0%
Jul 17Floating Chat Widget < 3.1.2 - Admin+ Stored Cross-Site Scripting
CVE-2023-0487
MS
MY Sticky Elements
Premio
7.2
1%
Feb 27My Sticky Elements < 2.0.9 - Admin+ SQLi
CVE-2022-3858
CH
Chaty
Premio
7.2
1%
Dec 5Chaty < 3.0.3 - Admin+ SQLi
CVE-2021-36846
CW
Chaty (WordPress plugin)
Premio
4.8
1%
Apr 11WordPress Chaty plugin <= 2.8.3 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
CVE-2022-0148
MY
Mystickyelements
Premio
5.4
2%
Feb 7All-in-one Floating Contact Form < 2.0.4 - Authenticated Reflected Cross-Site Scripting (XSS)
CVE-2021-25016
CH
Chaty
Premio
6.1
2%
Jan 3Chaty < 2.8.3 - Reflected Cross-Site Scripting
CVE-2021-24425
MY
Mystickymenu
Premio
4.8
1%
Aug 2myStickymenu < 2.5.2 - Authenticated Stored XSS