WordPress Wbcom BuddyPress Sticky Post premium plugin <= 1.9.7 - Arbitrary Plugin Installation, Activation and Deactivation vulnerability

Arbitrary Plugin Installation, Activation and Deactivation vulnerability discovered by Mary JJ Jay in WordPress BuddyPress Sticky Post premium plugin versions = 1.9.7. Solution Update the WordPress BuddyPress Sticky Post premium plugin to the latest available version at least 1.9.9...

PT-2016-3693

Name of the Vulnerable Software and Affected Versions WordPress versions prior to 4.3.1 Description The issue allows remote authenticated users to bypass intended access restrictions. This can lead to a private post being published and made sticky. Recommendations For versions prior to 4.3.1,...