A vulnerability has been found in My Sticky Elements Plugin up to 2.3.3 on WordPress and classified as problematic. This issue affects the function my_sticky_elements_bulks of the component Bulk Lead Deletion Handler. Performing manipulation results in missing authorization.

This vulnerability is identified as CVE-2025-14428. The attack can be initiated remotely. There is not any exploit available.