Skip to content
OpenAdvisories

Vendor

Premio

24 known vulnerabilities.

Products

Folders – Unlimited Folders to Organize Media Library Folder, Pages, Posts, File Manager 6 Chaty 3 My Sticky Bar – Floating Notification Bar & Sticky Header (formerly myStickymenu) 2 Stars Testimonials — Responsive Reviews & Star Ratings 2 Coupon X – Discount Popups & Promo Codes Pop Ups for WooCommerce 2 Floating Chat Widget: Contact Chat Icons, Telegram Chat, Line Messenger, WeChat, Email, SMS, Call Button – Chaty 2 Folders Pro 2 My Sticky Elements 2 All-in-one Sticky Floating Contact Form, Call, Click to Chat, and 50+ Social Icon Tabs – My Sticky Elements 1 Stars Testimonials 1 Chaty (WordPress plugin) 1 Chaty Pro 1
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 7.1
    CVE-2026-73360

    WordPress Chaty Pro plugin <= 3.5.8 - Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in Chaty Pro <= 3.5.8 versions.

    Premio Chaty Pro
  • High 7.5
    CVE-2026-3657

    My Sticky Bar <= 2.8.6 - Unauthenticated SQL Injection via 'stickymenu_contact_lead_form' Action

    The My Sticky Bar plugin for WordPress is vulnerable to SQL injection via the `stickymenu_contact_lead_form` AJAX action in all versions up to, and including, 2.8.6. This is due to the handler using attacker-controlled POST parameter names directly as SQL col…

    Premio My Sticky Bar – Floating Notification Bar & Sticky Header (formerly myStickymenu) Web / CMS
  • High 7.5
    CVE-2026-27370

    WordPress Chaty plugin <= 3.5.1 - Sensitive Data Exposure vulnerability

    Insertion of Sensitive Information Into Sent Data vulnerability in Premio Chaty chaty allows Retrieve Embedded Sensitive Data.This issue affects Chaty: from n/a through <= 3.5.1.

    Premio Chaty
  • High 7.5
    CVE-2024-12627

    Coupon X: Discount Pop Up, Promo Code Pop Ups, Announcement Pop Up, WooCommerce Popups <= 1.3.5 - Missing Authorization to Authenticated (Contributor+) PHP Object Injection

    The Coupon X: Discount Pop Up, Promo Code Pop Ups, Announcement Pop Up, WooCommerce Popups plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.3.5 via deserialization of untrusted input from post content passed t…

    Premio Coupon X – Discount Popups & Promo Codes Pop Ups for WooCommerce Web / CMS
  • High 8.8
    CVE-2024-11429

    Free Responsive Testimonials, Social Proof Reviews, and Customer Reviews – Stars Testimonials <= 3.3.3 - Authenticated (Contributor+) Local File Inclusion

    The Free Responsive Testimonials, Social Proof Reviews, and Customer Reviews – Stars Testimonials plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.3.3 via the 'stars-testimonials-with-slider-and-masonry-grid' …

    Premio Stars Testimonials — Responsive Reviews & Star Ratings Web / CMS
  • High 8.8
    CVE-2024-2024

    Folders Pro <= 3.0.2 - Authenticated(Author+) Arbitrary File Upload via handle_folders_file_upload

    The Folders Pro plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'handle_folders_file_upload' function in all versions up to, and including, 3.0.2. This makes it possible for authenticated attackers, with…

    Premio Folders Pro Web / CMS
  • High 7.1
    CVE-2023-25019

    WordPress Chaty Plugin <= 3.0.9 is vulnerable to Cross Site Scripting (XSS)

    Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Premio Chaty plugin <= 3.0.9 versions

    Premio Chaty