Sign in

Not rated

CVE-2023-5509 The myStickymenu WordPress plugin before 2.6.5 does not adequately authorize some ajax calls, allowing any logged-in…

Description

The myStickymenu WordPress plugin before 2.6.5 does not adequately authorize some ajax calls, allowing any logged-in user to perform the actions.

Affected products and versions

Product	Affected versions	Fixed in
Floating Notification Bar, Sticky Menu on Scroll, Announcement Banner, and Sticky Header for Any Theme 2.6	earliest → < 2.6.5	2.6.5

The 4 CVEs of Floating Notification Bar, Sticky Menu on Scroll, Announcement Banner, and Sticky Header for Any Theme →

CVE-2024-2643 The Floating Notification Bar, Sticky Menu on Scroll, Announcement Banner, and Sticky Header for Any WordPress… 4.8 Medium CVE-2024-7133 The Floating Notification Bar, Sticky Menu on Scroll, Announcement Banner, and Sticky Header for Any WordPress… 4.8 Medium CVE-2024-4090 The Floating Notification Bar, Sticky Menu on Scroll, Announcement Banner, and Sticky Header for Any WordPress… 4.8 Medium

Do you use Floating Notification Bar, Sticky Menu on Scroll, Announcement Banner, and Sticky Header for Any Theme?

Track this CVE Watch Floating Notification Bar, Sticky Menu on Scroll, Announcement Banner, and Sticky Header for Any Theme Check my SBOMs

www.cveye.io/en/cve/CVE-2023-5509

Timeline

Published November 20, 2023
Last modified August 2, 2024

References

wpscan.com wpscan.com

Track this CVE