UX Design Experts Experto CTA Widget Missing Authorization Vulnerability

A missing authorization vulnerability has been identified in the UX Design Experts Experto CTA Widget – Call To Action, Sticky CTA, Floating Button Plugin, affecting versions through 1.1.1. This vulnerability allows exploitation of incorrectly configured access control security levels.

Impact

Exploitation of this vulnerability could lead to unauthorized changes in settings, allowing attackers to manipulate the plugin's behavior or functionality.

Remediation

Users of the Experto CTA Widget – Call To Action, Sticky CTA, Floating Button Plugin should update to version 1.2.1 or later. Patchstack users can enable auto-update for vulnerable plugins.