Woostify

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Woostify records in CISA KEV

No Woostify vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Boostify Header Footer Builder For Elementor 2 records LOW Sites Library 1 record MEDIUM

Records

1 record in Sites Library · all components

TI-2023-05767 CVE-2023-6279 · GHSA-9xv5-7pc9-8rr3

Woostify Sites Library < 1.4.8 - Subscriber+ Arbitrary Options Update to DoS

MEDIUM 64

The Woostify Sites Library WordPress plugin before 1.4.8 does not have authorisation in an AJAX action, allowing any authenticated users, such as subscriber to update arbitrary blog options and set them to 'activated' wh…

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00493 Published 2024-01-29 Fixed in 1.4.8 CWE-862

Open these records in search →

Critical	0
High	1
Medium	2
Low	0
No CVSS	0