The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The Floating Notification Bar, Sticky Menu on Scroll, and Sticky Header for Any Theme – myStickymenu WordPress plugin before 2.5.2 does not sanitise or escape its Bar Text settings, allowing hight privilege users to use malicious JavaScript in it, leading to a Stored Cross-Site Scripting issue, which will be triggered in the plugin's setting, as well as all front-page of the blog (when the Welcome bar is active)
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Mystickymenu Plugin | — | Update mystickymenu plugin to version 2.5.2, or a newer patched version | May 15, 2025 | Jun 21, 2021 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub