Missing authorization in Premio My Sticky Elements allows an attacker to bypass access control security levels integrated within the plugin. This flaw can enable an unauthorized user to view or modify content, settings, or other privileged information that is otherwise restricted to authenticated administrators, potentially leading to data exposure or manipulation of website behavior.

The vulnerability affects the My Sticky Elements plugin, distributed by Premio, in all versions from first release through 2.3.3. Users running any of these versions on WordPress sites are potentially exposed.

The CVSS score of 4.3 indicates moderate severity, while an EPSS of less than 1% suggests a low likelihood of exploitation at this time. The vulnerability is not listed in the CISA KEV catalog. Based on the description, the likely attack vector is typical of web-based plugins: an authenticated user with elevated privileges or an attacker who has compromised credentials could exploit incorrectly configured access controls to gain unauthorized access to protected functionality.