CVE-2025-68995

Missing Authorization vulnerability in Premio My Sticky Elements mystickyelements allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects My Sticky Elements: from n/a through <= 2.3.3.

CVSS v3 4.3 MEDIUM

4.3^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.8 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact LOW

Scope UNCHANGED

References

Link	Resource
https://patchstack.com/database/Wordpress/Plugin/mystickyelements/vulnerability/wordpress-my-sticky-elements-plugin-2-3-3-broken-access-control-vulnerability?_s_id=cve

Configurations

No configuration.

History

05 Oct 2026, 18:10

Type	Values Removed	Values Added
Summary		(es) Vulnerabilidad de autorización faltante en Gal Dubinski My Sticky Elements mystickyelements permite la explotación de niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a My Sticky Elements: desde n/a hasta menor o igual a 2.3.3.

Information

Published : 2025-12-30 11:15

Updated : 2026-10-07 12:10

NVD link : CVE-2025-68995

Mitre link : CVE-2025-68995

CVE.ORG link : CVE-2025-68995

JSON object : View

Products Affected

No product.

CWE

CWE-862

Missing Authorization

{"id": "CVE-2025-68995", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-68995", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2025-12-30T15:31:39.233340Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "audit@patchstack.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 2.8}]}, "affected": [{"source": "audit@patchstack.com", "affectedData": [{"vendor": "Premio", "product": "My Sticky Elements", "versions": [{"status": "affected", "changes": [{"at": "2.3.4", "status": "unaffected"}], "version": "0", "versionType": "custom", "lessThanOrEqual": "2.3.3"}], "packageName": "mystickyelements", "collectionURL": "https://wordpress.org/plugins", "defaultStatus": "unaffected"}]}], "published": "2025-12-30T11:15:58.317", "references": [{"url": "https://patchstack.com/database/Wordpress/Plugin/mystickyelements/vulnerability/wordpress-my-sticky-elements-plugin-2-3-3-broken-access-control-vulnerability?_s_id=cve", "source": "audit@patchstack.com"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "audit@patchstack.com", "description": [{"lang": "en", "value": "CWE-862"}]}], "descriptions": [{"lang": "en", "value": "Missing Authorization vulnerability in Premio My Sticky Elements mystickyelements allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects My Sticky Elements: from n/a through <= 2.3.3."}, {"lang": "es", "value": "Vulnerabilidad de autorizaci\u00f3n faltante en Gal Dubinski My Sticky Elements mystickyelements permite la explotaci\u00f3n de niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a My Sticky Elements: desde n/a hasta menor o igual a 2.3.3."}], "lastModified": "2026-10-07T12:10:00.170", "sourceIdentifier": "audit@patchstack.com"}