Access violation vulnerability in WP CTA – Call To Action Plugin, Sticky CTA, Sticky Buttons 1.7.0

The WP CTA – Call To Action Plugin, Sticky CTA, Sticky Buttons plugin for WordPress has a security issue that could allow unauthorized changes to be made to data. This is because the plugin does not have a check in place to make sure that only authorized users can modify the ‘update_cta_status’ and ‘change_sticky_sidebar_name’ functions. This means that someone without proper authentication could change the status of a sticky and the name displayed in the back-end WP CTA Dashboard.