PLUGIN SECURITY
Is Mystickyelements safe?
Get leads with a floating contact form tab, chat & social buttons like Facebook Messenger, WhatsApp, Viber, Telegram, Twitter, Instagram & more 🎉
What this plugin does
- Slug:
mystickyelements - Author: Premio
- 40000+ active installs
- 98/100 rating (541 reviews on wordpress.org)
- 1019380 all-time downloads
- On WordPress.org since 2014-07-13
call now buttoncontact formfacebook messengerInstagramwhatsapp
Maintenance status
- Latest known version: 2.3.9
- Last updated: 2026-08-13 7:35am GMT
- Tested up to WordPress: 7.1
- Max supported PHP (analyzed): 8.4
Known vulnerabilities
6 known CVEs on file for Mystickyelements. Reported between 2022 and 2025.
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2025-14428 | All-in-one Sticky Floating Contact Form, Call, Click to Chat, and 50+ Social Icon Tabs – My Sticky Elements [mystickyelements] < 2.3.4 | Missing Authorization | Medium 4.3 | < 2.3.4 | 2.3.4 | 2025-12-31 | ✓ fixed in latest |
| CVE-2025-68995 | All-in-one Sticky Floating Contact Form, Call, Click to Chat, and 50+ Social Icon Tabs – My Sticky Elements [mystickyelements] < 2.3.4 | Missing Authorization | Medium 4.3 | < 2.3.4 | 2.3.4 | 2025-12-25 | ✓ fixed in latest |
| CVE-2023-51362 | All-in-one Sticky Floating Contact Form, Call, Click to Chat, and 50+ Social Icon Tabs – My Sticky Elements [mystickyelements] < 2.1.4 | Missing Authorization | Medium 5.3 | < 2.1.4 | 2.1.4 | 2023-12-26 | ✓ fixed in latest |
| CVE-2023-3248 | All-in-one Sticky Floating Contact Form, Call, Click to Chat, and 50+ Social Icon Tabs – My Sticky Elements [mystickyelements] < 2.1.2 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 4.8 | < 2.1.2 | 2.1.2 | 2023-07-03 | ✓ fixed in latest |
| CVE-2023-0487 | All-in-one Sticky Floating Contact Form, Call, Click to Chat, and 50+ Social Icon Tabs – My Sticky Elements [mystickyelements] < 2.0.9 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') | High 7.2 | < 2.0.9 | 2.0.9 | 2023-02-09 | ✓ fixed in latest |
| CVE-2022-0148 | All-in-one Sticky Floating Contact Form, Call, Click to Chat, and 50+ Social Icon Tabs – My Sticky Elements [mystickyelements] < 2.0.4 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 5.4 | < 2.0.4 | 2.0.4 | 2022-01-10 | ✓ fixed in latest |
How to fix it
Keep Mystickyelements updated — 2.3.9 is the latest version on wordpress.org, and each CVE above lists the exact release that fixed it ("Fixed in").
This is the plugin's full known vulnerability history, not a scan of any specific installation — run a free scan of your own site to check your exact installed version.
Safer / more established alternatives
- Contact Form 7 — 10000000+ active installs — 80/100 (2177) — max PHP 8.4
- Akismet Anti-spam: Spam Protection — 5000000+ active installs — 94/100 (1186) — max PHP 8.4
- WPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More — 5000000+ active installs — 96/100 (14366)
- Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder — 700000+ active installs — 96/100 (788)
- Forminator Forms – Contact Form, Payment Form & Custom Form Builder — 600000+ active installs — 96/100 (2112)
Check your own WordPress site
Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.