CVE Database /
CVE-2025-68995
CVE · Medium
CVE-2025-68995 — All-in-one Sticky Floating Contact Form, Call, Click to Chat, and 50+ Social Icon Tabs – My Sticky Elements [mystickyelements] < 2.3.4
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2025-68995
|
All-in-one Sticky Floating Contact Form, Call, Click to Chat, and 50+ Social Icon Tabs – My Sticky Elements [mystickyelements] < 2.3.4 |
Missing Authorization |
Medium
4.3
|
< 2.3.4
|
2.3.4 |
2025-12-25 |
—
|
CVE-2025-68995
A security flaw exists in the My Sticky Elements plugin for WordPress, allowing users with Subscriber-level permissions or higher to execute a specific function without proper authorization checks being performed. The issue affects all versions of the plugin up to and including 2.3.3. This vulnerability enables attackers to carry out unauthorized actions within the affected installations.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings