Advisories · Technology

gingerplugins Sticky Chat Widget – Floating Chat Icons, Contact Form, Call, Click to Chat, Email & Message Buttons.

Every CVE that names gingerplugins Sticky Chat Widget – Floating Chat Icons, Contact Form, Call, Click to Chat, Email & Message Buttons among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-15462 CVE record

CVSS 7.5 High

Sticky Chat Widget <= 1.4.2 - Unauthenticated SQL Injection
- gingerplugins Sticky Chat Widget – Floating Chat Icons, Contact Form, Call, Click to Chat, Email & Message Buttons
- SQL injection
Not analysed yet 11 Sept 2026