blendmedia

Products

Product	CVEs	Exploited	Latest
WP CTA – Call Now Button, Sticky Button & Call to Action Builder	3	–	Jul 29, 2026

CVE-2026-6089 Medium 4.9 WP CTA <= 2.1.2 - Authenticated (Administrator+) Server-Side Request Forgery 0.5%
CVE-2026-4661 High 7.5 WP CTA <= 2.2.2 - Unauthenticated Time-Based Blind SQL Injection via 'fildname' Parameter 0.5%
CVE-2025-8152 Medium 5.3 WP CTA – Call To Action Plugin, Sticky CTA, Sticky Buttons <= 1.7.0 - Missing Authorization to Unauthenticated Sticky Status Update 0.3%