Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

premio vulnerabilities

24 published CVEs name premio among the affected products.

Published CVEs
24
Last 12 months
9
Critical
1
Known exploited
0

Critical 1High 7Medium 15Low 1Not scored 0

CVEs per yearBy the year they were published

  1. 20221
  2. 20233
  3. 20248
  4. 20256
  5. 20266

Newest CVEs

  • CVE-2026-18964

    Floating Chat Widget: Contact Chat Icons, Telegram Chat, Line Messenger, WeChat, Email, SMS, Call Button <= 3.5.9 - Reflected Cross-Site Scripting

    premio · Floating Chat Widget: Contact Chat Icons, Telegram Chat, Line Messenger, WeChat, Email, SMS, Call Button – Chaty

    Medium6.1
  • CVE-2026-73360

    WordPress Chaty Pro plugin <= 3.5.8 - Cross Site Scripting (XSS) vulnerability

    Premio · Chaty Pro

    High7.1
  • CVE-2026-3657

    My Sticky Bar <= 2.8.6 - Unauthenticated SQL Injection via 'stickymenu_contact_lead_form' Action

    premio · My Sticky Bar – Floating Notification Bar & Sticky Header (formerly myStickymenu)

    High7.5
  • CVE-2026-27370

    WordPress Chaty plugin <= 3.5.1 - Sensitive Data Exposure vulnerability

    Premio · Chaty

    High7.5
  • CVE-2025-12640

    Folders – Unlimited Folders to Organize Media Library Folder, Pages, Posts, File Manager <= 3.1.5 - Missing Authorization to Authenticated (Author+) Media Replacement

    premio · Folders – Unlimited Folders to Organize Media Library Folder, Pages, Posts, File Manager

    Medium4.3
  • CVE-2025-14428

    My Sticky Elements <= 2.3.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Bulk Lead Deletion

    premio · All-in-one Sticky Floating Contact Form, Call, Click to Chat, and 50+ Social Icon Tabs – My Sticky Elements

    Medium4.3
  • CVE-2025-68995

    WordPress My Sticky Elements plugin <= 2.3.3 - Broken Access Control vulnerability

    Premio · My Sticky Elements

    Medium4.3
  • CVE-2025-67912

    WordPress Stars Testimonials plugin <= 3.3.4 - Cross Site Scripting (XSS) vulnerability

    Premio · Stars Testimonials

    Medium6.5
  • CVE-2025-12971

    Folders <= 3.1.5 - Incorrect Authorization to Authenticated (Contributor+) Folder Content Manipulation

    premio · Folders – Unlimited Folders to Organize Media Library Folder, Pages, Posts, File Manager

    Medium4.3
  • CVE-2025-1450

    Floating Chat Widget: Contact Chat Icons, Telegram Chat, Line Messenger, WeChat, Email, SMS, Call Button, WhatsApp – Chaty <= 3.3.5 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting

    premio · Floating Chat Widget: Contact Chat Icons, Telegram Chat, Line Messenger, WeChat, Email, SMS, Call Button – Chaty

    Medium6.4