Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: premio Component: Mystickymenu Clear all filters
TI-2023-05071 CVE-2023-5509 · GHSA-xvc2-6386-99x8

myStickymenu < 2.6.5 - Subscriber+ Arbitrary Form Leads Deletion

Priority LOW 25

The myStickymenu WordPress plugin before 2.6.5 does not adequately authorize some ajax calls, allowing any logged-in user to perform the actions.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.0052 Published 2023-11-20 Fixed in 2.6.5 CWE-863
TI-2021-06715 CVE-2021-24425 · GHSA-fc78-8j4r-qq56

myStickymenu < 2.5.2 - Authenticated Stored XSS

Priority LOW 23

The Floating Notification Bar, Sticky Menu on Scroll, and Sticky Header for Any Theme – myStickymenu WordPress plugin before 2.5.2 does not sanitise or escape its Bar Text settings, allowing hight privilege users to use…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00626 Published 2021-08-02 Fixed in 2.5.2 CWE-79