cleantalk
Vulnerabilities and Security Researches

WP CTA – Call To Action Plugin, Sticky CTA, Floating Buttons, Floating Tab Plugin, CVE-2025-53270

CVE, Research URL

CVE-2025-53270

Published on
Jun 27, 2025
Research Description
Cross-Site Request Forgery (CSRF) vulnerability in Blend Media WordPress CTA allows Cross Site Request Forgery. This issue affects WordPress CTA: from n/a through 1.6.9.
Affected versions
Min -, max 1.6.9.
Status
vulnerable