Description
The OoohBoi Steroids for Elementor WordPress plugin before 2.1.5 has CSRF and broken access control vulnerabilities which leads user with role as low as subscriber to delete attachment.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | OoohBoi Steroids for Elementor | < 2.1.5 | 2.1.5 |
References
- https://wpscan.com/vulnerability/ac74df9a-6fbf-4411-a501-97eba1ad1895 exploit vdb-entry technical-description