Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2023-5509

myStickymenu < 2.6.5 - Subscriber+ Arbitrary Form Leads Deletion

Description

The myStickymenu WordPress plugin before 2.6.5 does not adequately authorize some ajax calls, allowing any logged-in user to perform the actions.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown Floating Notification Bar, Sticky Menu on Scroll, Announcement Banner, and Sticky Header for Any Theme

Default version status: unaffected

  • 0 to < 2.6.5affected

References