blendmedia vulnerabilities
3 published CVEs name blendmedia among the affected products.
- 3Published CVEs3 of them scored
- 2Last 12 monthspublished in the last year
- 0Critical1 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-6089
WP CTA <= 2.1.2 - Authenticated (Administrator+) Server-Side Request Forgery
blendmedia · WP CTA – Call Now Button, Sticky Button & Call to Action Builder
Medium4.9 - CVE-2026-4661
WP CTA <= 2.2.2 - Unauthenticated Time-Based Blind SQL Injection via 'fildname' Parameter
blendmedia · WP CTA – Call Now Button, Sticky Button & Call to Action Builder
High7.5 - CVE-2025-8152
WP CTA – Call To Action Plugin, Sticky CTA, Sticky Buttons <= 1.7.0 - Missing Authorization to Unauthenticated Sticky Status Update
blendmedia · WP CTA – Call Now Button, Sticky Button & Call to Action Builder
Medium5.3