Premio My Sticky Bar Floating Notification Bar Sticky Header vulnerabilities

CVE-2026-3657 [HIGH] CWE-89 CVE-2026-3657: The My Sticky Bar plugin for WordPress is vulnerable to SQL injection via the `stickymenu_contact_le The My Sticky Bar plugin for WordPress is vulnerable to SQL injection via the `stickymenu_contact_lead_form` AJAX action in all versions up to, and including, 2.8.6. This is due to the handler using attacker-controlled POST parameter names directly as SQL column identifiers in `$wpdb->insert()`. While parameter values are sanitized with `esc_sql()` and `

CVE-2023-7048 [MEDIUM] CWE-352 CVE-2023-7048: The My Sticky Bar plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions u The My Sticky Bar plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.6.6. This is due to missing or incorrect nonce validation in mystickymenu-contact-leads.php. This makes it possible for unauthenticated attackers to trigger the export of a CSV file containing contact leads via a forged request gr