Blendmedia Wp Cta – Call Now Button, Sticky Button & Call To Action Builder
3 CVEs affecting Blendmedia Wp Cta – Call Now Button, Sticky Button & Call To Action Builder. Latest disclosed: 2026-07-29. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-4661 | High | 7.5 | 2026-07-11 | The WP CTA – Sticky CTA Builder, Generate Leads, Promote Sales plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'fildname' paramete… |
CVE-2025-8152 | Medium | 5.3 | 2025-08-02 | The WP CTA – Call To Action Plugin, Sticky CTA, Sticky Buttons plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capabil… |
CVE-2026-6089 | Medium | 4.9 | 2026-07-29 | The WP CTA plugin for WordPress is vulnerable to Server-Side Request Forgery via the 'sticky_s_media' parameter in imported JSON files in all versions up to, a… |