Skip to content
blendmedia WP CTA – Call Now Button, Sticky Button & Call to Action Builder
-
CVE-2026-6089
Medium 4.9
WP CTA <= 2.1.2 - Authenticated (Administrator+) Server-Side Request Forgery
0.5%
-
CVE-2026-4661
High 7.5
WP CTA <= 2.2.2 - Unauthenticated Time-Based Blind SQL Injection via 'fildname' Parameter
0.5%
-
CVE-2025-8152
Medium 5.3
WP CTA – Call To Action Plugin, Sticky CTA, Sticky Buttons <= 1.7.0 - Missing Authorization to Unauthenticated Sticky Status Update
0.3%