← Back

Ooohboi Steroids For Elementor

ooohboi_steroids_for_elementor

Vendor: Ooohboi Steroids For Elementor Project • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2023-1169
1Ooohboi Steroids For Elementor Project
1Ooohboi Steroids For Elementor
Jun 17, 2026
Jun 9, 2023
N/A· v4
4.3 MEDIUM· v3
N/A· v2
The OoohBoi Steroids for Elementor plugin for WordPress is vulnerable to missing authorization due to a missing capability check on the 'file_uploader_callback' function in versions up to, and including, 2.1.4. This make...Show more
The OoohBoi Steroids for Elementor plugin for WordPress is vulnerable to missing authorization due to a missing capability check on the 'file_uploader_callback' function in versions up to, and including, 2.1.4. This makes it possible for subscriber-level attackers to upload image attachments to the site.Show less
CVE-2023-0336
1Ooohboi Steroids For Elementor Project
1Ooohboi Steroids For Elementor
Jun 17, 2026
Mar 27, 2023
N/A· v4
6.5 MEDIUM· v3
N/A· v2
The OoohBoi Steroids for Elementor WordPress plugin before 2.1.5 has CSRF and broken access control vulnerabilities which leads user with role as low as subscriber to delete attachment.