Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Ooohboi Steroids For Elementor Project Component: Ooohboi Steroids For Elementor Clear all filters
TI-2023-01107 CVE-2023-1169 · GHSA-4q65-9q37-vxjp

OoohBoi Steroids for Elementor <= 2.1.4 - Missing Authorization leading to Authenticated (Subscriber+) Image Upload

Priority LOW 21

The OoohBoi Steroids for Elementor plugin for WordPress is vulnerable to missing authorization due to a missing capability check on the 'file_uploader_callback' function in versions up to, and including, 2.1.4.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00573 Published 2023-06-09 No fix listed CWE-862
TI-2023-00320 CVE-2023-0336 · GHSA-72jf-m53h-xpvg

OoohBoi Steroids for Elementor < 2.1.5 - Subscriber+ Attachment Deletion

Priority MEDIUM 62

The OoohBoi Steroids for Elementor WordPress plugin before 2.1.5 has CSRF and broken access control vulnerabilities which leads user with role as low as subscriber to delete attachment.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01003 Published 2023-03-27 Fixed in 2.1.5 CWE-352