Log in Start free

Premio

Products

ProductCVEsExploitedLatest
Folders – Unlimited Folders to Organize Media Library Folder, Pages, Posts, File Manager6–Jan 8, 2026
Chaty3–Mar 5, 2026
Stars Testimonials — Responsive Reviews & Star Ratings2–Dec 5, 2024
Floating Chat Widget: Contact Chat Icons, Telegram Chat, Line Messenger, WeChat, Email, SMS, Call Button – Chaty2–Sep 11, 2026
Folders Pro2–Jun 14, 2024
My Sticky Bar – Floating Notification Bar & Sticky Header (formerly myStickymenu)2–Mar 12, 2026
My Sticky Elements2–Dec 30, 2025
Coupon X – Discount Popups & Promo Codes Pop Ups for WooCommerce2–Jan 11, 2025
Chaty (WordPress plugin)1–Apr 11, 2022
All-in-one Sticky Floating Contact Form, Call, Click to Chat, and 50+ Social Icon Tabs – My Sticky Elements1–Jan 1, 2026
Stars Testimonials1–Dec 16, 2025
Chaty Pro1–Aug 18, 2026

Exploited and recent CVEs

  • CVE-2026-18964 Medium 6.1 Floating Chat Widget: Contact Chat Icons, Telegram Chat, Line Messenger, WeChat, Email, SMS, Call Button <= 3.5.9 - Reflected Cross-Site Scripting 0.4%
  • CVE-2026-73360 High 7.1 WordPress Chaty Pro plugin <= 3.5.8 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2026-3657 High 7.5 My Sticky Bar <= 2.8.6 - Unauthenticated SQL Injection via 'stickymenu_contact_lead_form' Action 0.4%
  • CVE-2026-27370 High 7.5 WordPress Chaty plugin <= 3.5.1 - Sensitive Data Exposure vulnerability 0.4%
  • CVE-2025-12640 Medium 4.3 Folders – Unlimited Folders to Organize Media Library Folder, Pages, Posts, File Manager <= 3.1.5 - Missing Authorization to Authenticated (Author+) Media Replacement 0.2%
  • CVE-2025-14428 Medium 4.3 My Sticky Elements <= 2.3.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Bulk Lead Deletion 0.3%
  • CVE-2025-68995 Medium 4.3 WordPress My Sticky Elements plugin <= 2.3.3 - Broken Access Control vulnerability 0.3%
  • CVE-2025-67912 Medium 6.5 WordPress Stars Testimonials plugin <= 3.3.4 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-12971 Medium 4.3 Folders <= 3.1.5 - Incorrect Authorization to Authenticated (Contributor+) Folder Content Manipulation 0.2%
  • CVE-2025-1450 Medium 6.4 Floating Chat Widget: Contact Chat Icons, Telegram Chat, Line Messenger, WeChat, Email, SMS, Call Button, WhatsApp – Chaty <= 3.3.5 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting 0.3%
  • CVE-2024-12204 Medium 5.4 Coupon X: Discount Pop Up, Promo Code Pop Ups, Announcement Pop Up, WooCommerce Popups <= 1.3.5 - Missing Authorization 0.3%
  • CVE-2024-12627 High 7.5 Coupon X: Discount Pop Up, Promo Code Pop Ups, Announcement Pop Up, WooCommerce Popups <= 1.3.5 - Missing Authorization to Authenticated (Contributor+) PHP Object Injection 0.6%
  • CVE-2023-51362 Medium 5.3 WordPress myStickyElements plugin <= 2.1.3 - Broken Access Control vulnerability 0.5%
  • CVE-2024-11429 High 8.8 Free Responsive Testimonials, Social Proof Reviews, and Customer Reviews – Stars Testimonials <= 3.3.3 - Authenticated (Contributor+) Local File Inclusion 0.7%
  • CVE-2024-8989 Medium 6.4 Stars Testimonials <= 3.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via stars_testimonials Shortcode 0.3%
  • CVE-2024-7317 Medium 6.4 Folders – Unlimited Folders to Organize Media Library Folder, Pages, Posts, File Manager <= 3.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via SVG File Upload 0.4%
  • CVE-2024-2024 High 8.8 Folders Pro <= 3.0.2 - Authenticated(Author+) Arbitrary File Upload via handle_folders_file_upload 3.3%
  • CVE-2024-2023 Medium 4.3 Folders <= 3.0 and Folders Pro <= 3.0.2 - Directory Traversal via handle_folders_file_upload 0.7%
  • CVE-2024-2023 Medium 4.3 Folders <= 3.0 and Folders Pro <= 3.0.2 - Directory Traversal via handle_folders_file_upload 0.7%
  • CVE-2024-3868 Medium 5.4 Folders Pro <= 3.0.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via User First Name and Last Name 0.4%
  • CVE-2023-7048 Low 3.1 My Sticky Bar <= 2.6.6 - Cross-Site Request Forgery to Sensitive Information Exposure 0.2%
  • CVE-2023-40204 Critical 9.1 WordPress Folders Plugin <= 2.9.2 is vulnerable to Arbitrary File Upload 0.8%
  • CVE-2023-47759 Medium 5.9 WordPress Chaty plugin <= 3.1.2 - Cross Site Scripting (XSS) vulnerability 0.4%
  • CVE-2023-25019 High 7.1 WordPress Chaty Plugin <= 3.0.9 is vulnerable to Cross Site Scripting (XSS) 0.4%
  • CVE-2021-36846 Medium 4.8 WordPress Chaty plugin <= 2.8.3 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability 0.6%