Description
WordPress Plugin CTA for WordPress-Easy Side Tab [only if downloaded via the vendor website] contains suspicious code. Attackers can exploit this issue to perform a variety of actions. Successful attacks will compromise the affected application and possibly the webserver or computer. WordPress Plugin CTA for WordPress-Easy Side Tab version 1.0.7 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 1.0.8 or latest
References
Related Vulnerabilities
PostgreSQL Heap-based Buffer Overflow Vulnerability (CVE-2026-19385)
WordPress Plugin Advanced Custom Fields (ACF) Cross-Site Scripting (5.7.7)
Moodle Configuration Vulnerability (CVE-2012-0797)
Liferay Portal Missing Authorization Vulnerability (CVE-2025-62256)
WordPress Plugin Page Flip Image Gallery 'book_id' Parameter Remote File Disclosure (0.2.2)