CVE-2023-5509 (published 2023-11-20T18:55:10.363Z)
The myStickymenu WordPress plugin before 2.6.5 does not adequately authorize some ajax calls, allowing any logged-in user to perform the actions.
Affected products: Vendor: Unknown
Product: Floating Notification Bar, Sticky Menu on Scroll, Announcement Banner, and Sticky Header for Any Theme
Versions: 0