CVSS 3.1
6.5 mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:NCVE-2023-0336
Medium (6.5) in ooohboi steroids for elementor project ooohboi steroids for elementor. EPSS 1.0% chance of exploitation in the next 30 days.
The OoohBoi Steroids for Elementor WordPress plugin before 2.1.5 has CSRF and broken access control vulnerabilities which leads user with role as low as subscriber to delete attachment.
Severity
- EPSS
- 1.0% chance of exploitation in the next 30 days; higher than 62% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-352, CWE-862
- Published
- Modified
- Record from
- the NVD, synced
Affected
- ooohboi_steroids_for_elementor_project:ooohboi_steroids_for_elementor