← CVE Intelligence

CVE-2023-0336

OoohBoi Steroids for Elementor < 2.1.5 - Subscriber+ Attachment Deletion PUBLISHED

Description (CNA)

The OoohBoi Steroids for Elementor WordPress plugin before 2.1.5 has CSRF and broken access control vulnerabilities which leads user with role as low as subscriber to delete attachment.

Affected (CNA)

Vendor / productVersions
Unknown / OoohBoi Steroids for Elementoraffected 0 before 2.1.5

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.