Approved changes feed: RSS · Atom

cpe:2.3:a:unknown:floating_notification_bar,_sticky_menu_on_scroll,_announcement_banner,_and_sticky_header_for_any_theme:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorUnknown (668ca391-a6cc-5e33-879b-83885214de33)
ProductFloating Notification Bar, Sticky Menu On Scroll, Announcement Banner, And Sticky Header For Any Theme (e62b1dd5-1e4d-5e17-8094-3e3a16163522)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-7133 vulnerable 2026-06-08 06:58:21.338917 My Sticky Bar < 2.7.3 - Admin+ Stored XSS
The Floating Notification Bar, Sticky Menu on Scroll, Announcement Banner, and Sticky Header for Any WordPress plugin before 2.7.3 does not validate and escape some of its settings before outputting them back in the page, which could allow users with a high role to perform Stored Cross-Site Scripting attacks.
Published: 2024-09-13T06:00:03.935Z
Updated: 2024-09-13T15:24:30.807Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4090 vulnerable 2026-06-08 06:50:17.012748 My Sticky Bar < 2.7.2 - Admin+ Stored XSS
The Floating Notification Bar, Sticky Menu on Scroll, Announcement Banner, and Sticky Header for Any WordPress plugin before 2.7.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed
Published: 2024-08-01T06:00:05.396Z
Updated: 2024-08-01T13:36:51.336Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2643 vulnerable 2026-06-08 06:33:31.715887 My Sticky Bar < 2.6.8 - Admin+ Stored XSS
The Floating Notification Bar, Sticky Menu on Scroll, Announcement Banner, and Sticky Header for Any WordPress plugin before 2.6.8 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
Published: 2025-05-15T20:09:44.129Z
Updated: 2025-05-20T14:22:29.007Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-5509 vulnerable 2026-06-08 06:19:43.901910 myStickymenu < 2.6.5 - Subscriber+ Arbitrary Form Leads Deletion
The myStickymenu WordPress plugin before 2.6.5 does not adequately authorize some ajax calls, allowing any logged-in user to perform the actions.
Published: 2023-11-20T18:55:10.363Z
Updated: 2024-08-02T07:59:44.718Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.