CVE Database /
CVE-2023-51362
CVE · Medium
CVE-2023-51362 — All-in-one Sticky Floating Contact Form, Call, Click to Chat, and 50+ Social Icon Tabs – My Sticky Elements [mystickyelements] < 2.1.4
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2023-51362
|
All-in-one Sticky Floating Contact Form, Call, Click to Chat, and 50+ Social Icon Tabs – My Sticky Elements [mystickyelements] < 2.1.4 |
Missing Authorization |
Medium
5.3
|
< 2.1.4
|
2.1.4 |
2023-12-26 |
—
|
CVE-2023-51362
The My Sticky Elements plugin for WordPress versions below 2.1.4 contains a broken access control vulnerability that allows unauthenticated or low-privileged users to perform actions restricted to higher-privileged roles due to missing authorization and authentication checks in certain functions. Researcher Revan Arifio identified and reported this flaw, which was resolved in version 2.1.4 and later. Users of the plugin should upgrade immediately to patch the vulnerability.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings