Description
Cross-Site Request Forgery (CSRF) vulnerability in Oceanwp sticky header plugin <= 1.0.8 on WordPress.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Oren Hahiashvili | Oceanwp sticky header | ≤ 1.0.8 | — |
Medium · 4.3
CVE-2022-35730
EUVD-2022-38604GHSA-ghgc-cvj9-3425
WordPress Oceanwp sticky header plugin <= 1.0.8 is vulnerable to Cross Site Request Forgery (CSRF)
Published Dec 4, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack