Every CVE whose affected-product data names A17lab Wpstickybar, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.
CVEs (2)
CVE-2024-5765 — CVSS 9.8 (critical): The WpStickyBar WordPress plugin through 2.1.0 does not properly sanitise and escape a parameter before using it in a SQL statement via an…
CVE-2024-6226 — CVSS 6.1 (medium): The WpStickyBar WordPress plugin through 2.1.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a…