CVE-2023-5509 — myStickymenu < 2.6.5 - Subscriber+ Arbitrary Form Leads Deletion

CVE-2023-5509

myStickymenu < 2.6.5 - Subscriber+ Arbitrary Form Leads Deletion PUBLISHED

Description (CNA)

The myStickymenu WordPress plugin before 2.6.5 does not adequately authorize some ajax calls, allowing any logged-in user to perform the actions.

Vendor / product	Versions
Unknown / Floating Notification Bar, Sticky Menu on Scroll, Announcement Banner, and Sticky Header for Any Theme	affected 0 before 2.6.5

No CWE identifiers supplied.

CVE

No English description supplied.