cleantalk
Vulnerabilities and Security Researches

WP CTA – Call To Action Plugin, Sticky CTA, Floating Buttons, Floating Tab Plugin, CVE-2025-53270

CVE, Research URL

CVE-2025-53270

Published on
Jun 27, 2025
Research Description
Cross-Site Request Forgery (CSRF) vulnerability in Blend Media WordPress CTA easy-sticky-sidebar allows Cross Site Request Forgery.This issue affects WordPress CTA: from n/a through <= 1.7.0.
Affected versions
max 1.7.1.
Status
vulnerable