CVE-2023-51362

Name of the Vulnerable Software and Affected Versions All-in-one Floating Contact Form – My Sticky Elements versions 2.1.3 and earlier

Description The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. This vulnerability can be exploited due to missing authorization in the Premio All-in-one Floating Contact Form – My Sticky Elements plugin.

Recommendations For All-in-one Floating Contact Form – My Sticky Elements versions 2.1.3 and earlier, update to a version later than 2.1.3 to resolve the issue. At the moment, there is no information about additional mitigation measures for this vulnerability.