gingerplugins
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Notification Bar, Sticky Notification Bar, Sticky Welcome Bar for any theme | 1 | – | Mar 31, 2025 |
| Sticky Chat Widget | 1 | – | Aug 18, 2026 |
| Sticky Chat Widget – Floating Chat Icons, Contact Form, Call, Click to Chat, Email & Message Buttons | 1 | – | Sep 11, 2026 |
Exploited and recent CVEs
- CVE-2026-15462 Sticky Chat Widget <= 1.4.2 - Unauthenticated SQL Injection 0.5%
- CVE-2026-73187 WordPress Sticky Chat Widget plugin <= 1.4.2 - SQL Injection vulnerability 0.4%
- CVE-2025-31610 WordPress Notification Bar, Sticky Notification Bar, Sticky Welcome Bar for any theme plugin <= 1.1 - Cross Site Scripting (XSS) vulnerability 0.2%