Vendor

Blend Media

5 known vulnerabilities.

Products

WP CTA – Call Now Button, Sticky Button & Call to Action Builder 3 WordPress CTA 2

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

High 7.5

CVE-2026-4661

WP CTA <= 2.2.2 - Unauthenticated Time-Based Blind SQL Injection via 'fildname' Parameter

The WP CTA – Sticky CTA Builder, Generate Leads, Promote Sales plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'fildname' parameter in all versions up to, and including, 2.2.2. This is due to insufficient escaping of user-supplied…

Blend Media WP CTA – Call Now Button, Sticky Button & Call to Action Builder Web / CMS

Jul 11, 2026