Read the docs

Ooohboi Steroids For Elementor Project

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Ooohboi Steroids For Elementor Project records in CISA KEV

No Ooohboi Steroids For Elementor Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Ooohboi Steroids For Elementor 2 records MEDIUM

Records

2 records

TI-2023-00320 CVE-2023-0336 · GHSA-72jf-m53h-xpvg

OoohBoi Steroids for Elementor < 2.1.5 - Subscriber+ Attachment Deletion

Priority MEDIUM 62

The OoohBoi Steroids for Elementor WordPress plugin before 2.1.5 has CSRF and broken access control vulnerabilities which leads user with role as low as subscriber to delete attachment.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01003 Published 2023-03-27 Fixed in 2.1.5 CWE-352
TI-2023-01107 CVE-2023-1169 · GHSA-4q65-9q37-vxjp

OoohBoi Steroids for Elementor <= 2.1.4 - Missing Authorization leading to Authenticated (Subscriber+) Image Upload

Priority LOW 21

The OoohBoi Steroids for Elementor plugin for WordPress is vulnerable to missing authorization due to a missing capability check on the 'file_uploader_callback' function in versions up to, and including, 2.1.4.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00573 Published 2023-06-09 No fix listed CWE-862
Open these records in search →