The My Sticky Elements plugin for WordPress, which provides an all-in-one floating contact form, is vulnerable to unauthorized access in versions up to and including 2.1.3. This means that unauthenticated attackers can do something they shouldn’t be able to do. It is due to a missing capability check on an unknown function.
This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!
Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:
> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21
Is this information incorrect? Please leave us a message.
