CVE-2023-51362

Summary

CVE-2023-51362 is a new vulnerability impacting the Premio All-in-one Floating Contact Form – My Sticky Elements plugin. The issue lies in the plugin's authorization mechanism, making it possible for unauthorized users to exploit incorrectly configured access control security levels. This vulnerability can be found in versions 2.1.3 and below of the plugin. Successful exploitation may result in unauthorized access or modification to form data, posing a significant risk to websites using the affected plugin. Users are advised to update to the latest version of the plugin or contact their plugin provider for assistance.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.