High · 7.1 CVE-2024-51631 EUVD-2024-45569GHSA-56f7-h7m2-r62r

WordPress Sticky Social Bar plugin <= 2.0 - CSRF to Stored Cross Site Scripting (XSS) vulnerability

Published Nov 19, 2024 · Updated May 11, 2026 · Assigned by Patchstack

Vendor: Md Eftakhairul Islam Product: Sticky Social Bar

Description

Cross-Site Request Forgery (CSRF) vulnerability in Md Eftakhairul Islam Sticky Social Bar sticky-social-bar allows Cross Site Request Forgery.This issue affects Sticky Social Bar: from n/a through <= 2.0.

Affected products

Vendor	Product	Affected	Fixed
Md Eftakhairul Islam	Sticky Social Bar	≤ 2.0	—

References

https://patchstack.com/database/Wordpress/Plugin/sticky-social-bar/vulnerability/wordpress-sticky-social-bar-plugin-2-0-csrf-to-stored-cross-site-scripting-xss-vulnerability?_s_id=cve vdb-entry