Is Sticky Buttons safe?

Plugin details

• Slug: sticky-buttons
• Requires PHP: 7.4+
• Max supported PHP (analyzed): 8.4

Known vulnerabilities

• Sticky Buttons &#8211; Floating Buttons Builder [sticky-buttons] < 3.1.1 [CVE-2023-2362, Multiple Wow-Company Plugins (Various Versions) -- Reflected Cross-Site Scripting via 'page' parameter, Multiple Plugins from Wow-Company - Reflected XSS]
• Sticky Buttons &#8211; Floating Buttons Builder [sticky-buttons] < 3.2.3 [Sticky Buttons <= 3.2.2 - Authenticated (Admin+) Stored Cross-Site Scripting]
• Sticky Buttons &#8211; Floating Buttons Builder [sticky-buttons] < 3.2.3 [CVE-2024-0703, WordPress Sticky Buttons Plugin <= 3.2.2 is vulnerable to Cross Site Scripting (XSS), Sticky Buttons &lt; 3.2.3 - Authenticated (Admin+) Stored Cross-Site Scripting]
• Sticky Buttons &#8211; Floating Buttons Builder [sticky-buttons] < 3.2.4 [CVE-2024-3475, WordPress Sticky Buttons Plugin < 3.2.4 is vulnerable to Cross Site Request Forgery (CSRF), Sticky Buttons – floating buttons builder <= 3.2.3 - Cross-Site Request Forgery]
• Sticky Buttons &#8211; Floating Buttons Builder [sticky-buttons] < 4.1.2 [CVE-2025-24720, WordPress Sticky Buttons Plugin <= 4.1.1 is vulnerable to Cross Site Request Forgery (CSRF), Sticky Buttons <= 4.1.1 - Cross-Site Request Forgery to Settings Update, EUVD-2025-3912]

Vulnerabilities are matched against the exact installed version when it's known. Always keep the plugin updated to the latest release.

Safer / more established alternatives

• Sticky Menu & Sticky Header — 100000+ active installs — max PHP 8.4
• Buttonizer – Floating Menus, Sticky Buttons, & Popup Builder — 70000+ active installs
• Float menu – awesome floating side menu — 30000+ active installs — max PHP 8.4
• Simple Floating Menu — 10000+ active installs
• Side Menu Lite – Sticky Floating Side Menu — 7000+ active installs