CVE-2023-5509

The myStickymenu WordPress plugin before 2.6.5 does not adequately authorize some ajax calls, allowing any logged-in user to perform the actions.

Score

CVSS 3.1 5.4 Medium

Status

Modified - contact@wpscan.com

Published

2023-11-20

Last modified

2024-08-02

Weaknesses

CWE-863

Affected products

• Mystickymenu (Premio)
• And Sticky Header For Any Theme (Unknown)
• Announcement Banner (Unknown)
• Floating Notification Bar (Unknown)
• Sticky Menu On Scroll (Unknown)

References

• https://wpscan.com/vulnerability/3b33c262-e7f0-4310-b26d-4727d7c25c9d