VULNERABILITY INTELLIGENCE

CVE-2023-0336

CVSS score6.5 MEDIUM
EPSS probability1.00%
CISA KEVNot currently listed
Published2023-03-27
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Description

The OoohBoi Steroids for Elementor WordPress plugin before 2.1.5 has CSRF and broken access control vulnerabilities which leads user with role as low as subscriber to delete attachment.

Weakness classification

  • nvd@nist.gov: CWE-352

Primary references