WP CTA – Call Now Button, Sticky Button & Call to Action Builder

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 44% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. A small install base leaves thin data to model from. A declining trend compresses what a buyer would pay.

1. ★★★★★ bakhshispco

   3.8y ago

   also I couldn’t find save button to see the changes

   Read on wp.org ↗
2. ★★★★★ ingmariosantos

   3.8y ago

   QUICKLY DOES WHAT IT SAYS EVEN WITH THE FREE VERSION

   Read on wp.org ↗
3. ★★★★★ patriciogmb

   4.3y ago

   It would be great if you could place a short code of contact form made with Elementor pro or wp forms for example instead of just a cta. in fact you can but it does not work because when placing the data in the form does not allow the page where it is displayed is reloaded. correct that and you will be 5 stars friends.

   Read on wp.org ↗
4. ★★★★★ ivorf

   4.9y ago

   Fast responded to reported issues. Thanks!

   Read on wp.org ↗
5. ★★★★★ oizo.gg

   6.1y ago

   Works just as it should be. Love it!

   Read on wp.org ↗
6. ★★★★★ edwardsmithjr

   6.2y ago

   I love this sidebar to boast my new monthly current promotions. Thanks for making a great plugin.

   Read on wp.org ↗
7. ★★★★★ Design

   6.2y ago

   I’ve tried many sidebar plugins and this is the only one that worked the way I want it. Thank you for making this. This topic was modified 6 years, 1 month ago by Design.

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 2.3.0 Styling customization is now available in the free version. Removed the free CTA creation limit so users can create and display more CTAs. Added time-based asset versioning for CSS and JavaScript files to make saved chan 2.3.0
2. — Version 2.2.2 Fixed import failures caused by malformed exported CTA metadata and object-shaped option data. 2.2.2
3. — Version 2.2.1 Added a one-time admin feature notification Admin notice dismissal now persists per user 2.2.1
4. — Version 2.2.0 Admin styling tab layout improvements Pro feature lock UI refinements Preview, placement, and template UX updates 2.2.0
5. — Version 2.1.3 Security hardening and validation fixes Admin UX and preview safety improvements Code quality and compatibility updates 2.1.3
6. — Version 2.1.2 Tab CTA launched for free version Live preview fixes New description for new features Minor code improvements 2.1.2

8 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. Medium · 4.9 WP CTA <= 2.1.2 - Authenticated (Administrator+) Server-Side Request Forgery ↗
   2026-07-28 CVE-2026-6089 Server-Side Request Forgery (SSRF) Affects 2.1.2 Patched in 2.1.3
2. High · 7.5 WP CTA <= 2.2.2 - Unauthenticated Time-Based Blind SQL Injection via 'fildname' Parameter ↗
   2026-07-10 CVE-2026-4661 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 2.2.2 Patched in 2.3.0
3. Medium · 5.3 WP CTA – Sticky CTA Builder, Generate Leads, Promote Sales <= 2.1.2 - Missing Authorization ↗
   2026-03-03 CVE-2026-22459 Missing Authorization Affects <= 2.1.2 Patched in 2.1.3
4. Medium · 5.3 WP CTA – Call To Action Plugin, Sticky CTA, Sticky Buttons <= 1.7.0 - Missing Authorization to Unauthenticated Sticky Status Update ↗
   2025-08-01 CVE-2025-8152 Missing Authorization Affects <= 1.7.0 Patched in 1.7.1
5. Medium · 4.3 WordPress CTA <= 1.7.0 - Cross-Site Request Forgery ↗
   2025-06-27 CVE-2025-53270 Cross-Site Request Forgery (CSRF) Affects <= 1.7.0 Patched in 1.7.1
6. Medium · 6.5 WordPress CTA <= 1.5.8 - Missing Authorization via Multiple AJAX Actions ↗
   2023-10-25 CVE-2023-46644 Missing Authorization Affects <= 1.5.8 Patched in 1.5.9
7. Medium · 4.3 Appsero <= 1.2.1 - Missing Authorization ↗
   2022-12-16 Missing Authorization Affects <= 1.5.8 Patched in 1.5.9
8. Medium · 4.3 Appsero <= 1.2.0 - Cross-Site Request Forgery ↗
   2022-12-14 CVE-2022-47150 Cross-Site Request Forgery (CSRF) Affects <= 1.5.8 Patched in 1.5.9

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0.1

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2023-11-09 3K+ → 2K+ down after 225 days in tier
2. 2023-03-29 2K+ → 3K+ up after 1 days in tier
3. 2023-03-28 3K+ → 2K+ down after 3 days in tier
4. 2023-03-25 2K+ → 3K+ up

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• Call Now Button – The #1 Click to Call Button for WordPress 200K+ installs · 4.7★ · 2 shared tags A
• WP Call Button – Easy Click to Call Button for WordPress 40K+ installs · 4.5★ · 2 shared tags A
• Really Simple Click To Call Bar 7K+ installs · 4.2★ · 2 shared tags D
• All-in-one contact buttons – WPSHARE247 4K+ installs · 4.0★ · 2 shared tags C
• Call to Action Block by WPPOOL 1K+ installs · 3.7★ · 2 shared tags B
• Floating Awesome Button (Sticky Button, Popup, Toast) & 200+ Website Custom Interactive Element 700+ installs · 4.2★ · 2 shared tags B

Embed this report card

Drop a live Pulse card for WP CTA – Call Now Button, Sticky Button & Call to Action Builder into a readme, a review or a deck. It updates itself.

WP CTA – Call Now Button, Sticky Button & Call to Action Builder: 2K+ active installs, 4.4★ (7 reviews). Plugin Pulse (WP Mayor), as of 2026-08-29. https://plugins.wpmayor.com/plugin/easy-sticky-sidebar