CVE-2025-39421

UNKNOWN 0.0

WordPress WP Sticky Side Buttons plugin <= 2.1 - Cross Site Request Forgery (CSRF) vulnerability

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

Cross-Site Request Forgery (CSRF) vulnerability in Mustafa KUCUK WP Sticky Side Buttons wp-sticky-side-buttons allows Stored XSS.This issue affects WP Sticky Side Buttons: from n/a through <= 2.1.

CWE	CWE-352
Vendor	mustafa kucuk
Product	wp sticky side buttons
Published	Apr 17, 2025
Last Updated	Apr 1, 2026

Stay Ahead of the Next One

Get instant alerts for mustafa kucuk wp sticky side buttons

Be the first to know when new unknown vulnerabilities affecting mustafa kucuk wp sticky side buttons are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Mustafa KUCUK / WP Sticky Side Buttons

0 ≤ 2.1

References

NVD ↗ CVE.org ↗ EPSS Data ↗

patchstack.com: https://patchstack.com/database/Wordpress/Plugin/wp-sticky-side-buttons/vulnerability/wordpress-wp-sticky-side-buttons-plugin-2-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve

Credits

johska | Patchstack Bug Bounty Program