Vendor

    Premio

    37 known vulnerabilities in products by Premio, 0 of them actively exploited (CISA KEV).

    Key figures

    37

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Premio
    HighCVE-2024-2024

    Folders Pro <= 3.0.2 - Authenticated (Author+) Arbitrary File Upload via handle_folders_file_upload

    		8.8
    HighCVE-2023-0487

    My Sticky Elements < 2.0.9 - Admin+ SQLi

    		7.2
    MediumCVE-2021-25016

    Chaty < 2.8.3 - Reflected Cross-Site Scripting

    		6.1
    CriticalCVE-2023-40204

    WordPress Folders Plugin <= 2.9.2 is vulnerable to Arbitrary File Upload

    		9.1
    HighCVE-2024-11429

    Premio Stars Testimonials: PHP Remote File Inclusion

    		8.8
    MediumCVE-2022-0148

    All-in-one Floating Contact Form < 2.0.4 - Authenticated Reflected Cross-Site Scripting (XSS)

    		5.4
    HighCVE-2022-3858

    Chaty < 3.0.3 - Admin+ SQLi

    		7.2
    MediumCVE-2026-18964

    Cross-site Scripting (CVE-2026-18964)

    		6.1
    HighCVE-2024-12627

    Deserialization of Untrusted Data (CVE-2024-12627)

    		7.5
    HighCVE-2026-73360

    WordPress Chaty Pro plugin <= 3.5.8 - Cross Site Scripting (XSS) vulnerability

    		7.1
    HighCVE-2026-3657

    My Sticky Bar <= 2.8.6 - Unauthenticated SQL Injection via 'stickymenu_contact_lead_form' Action

    		7.5
    HighCVE-2026-27370

    WordPress Chaty plugin <= 3.5.1 - Sensitive Data Exposure vulnerability

    		7.5
    MediumCVE-2024-2023

    Folders <= 3.0 and Folders Pro <= 3.0.2 - Directory Traversal via handle_folders_file_upload

    		4.3
    HighCVE-2023-25019

    WordPress Chaty Plugin <= 3.0.9 is vulnerable to Cross Site Scripting (XSS)

    		7.1
    MediumCVE-2023-51362

    WordPress myStickyElements plugin <= 2.1.3 - Broken Access Control vulnerability

    		5.3
    MediumCVE-2023-5509

    myStickymenu < 2.6.5 - Subscriber+ Arbitrary Form Leads Deletion

    		5.4
    MediumCVE-2024-7317

    Premio Folders: Cross-site Scripting

    		6.4
    MediumCVE-2025-67912

    WordPress Stars Testimonials plugin <= 3.3.4 - Cross Site Scripting (XSS) vulnerability

    		6.5
    MediumCVE-2024-8989

    Premio Stars Testimonials: Cross-site Scripting

    		6.4
    MediumCVE-2021-24425

    myStickymenu < 2.5.2 - Authenticated Stored XSS

    		4.8
    MediumCVE-2021-36846

    WordPress Chaty plugin <= 2.8.3 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

    		4.8
    MediumCVE-2025-1450

    Premio Floating Chat Widget: Cross-site Scripting

    		6.4
    MediumCVE-2023-47759

    WordPress Chaty plugin <= 3.1.2 - Cross Site Scripting (XSS) vulnerability

    		5.9
    MediumCVE-2024-4090

    My Sticky Bar < 2.7.2 - Admin+ Stored XSS

    		4.8
    MediumCVE-2024-7133

    My Sticky Bar < 2.7.3 - Admin+ Stored XSS

    		4.8

    All vulnerabilities in search

    Products

    Products by Premio
    Premio Chaty70
    Folders – Unlimited Folders To Organize Media Library Folder, Pages, Posts, File Manager60
    My Sticky Bar40
    My Sticky Elements40
    Floating Chat Widget30