CVE-2023-0336

PoC —

CVSS 3.1

6.5 medium

EPSS

1%p61

Published

Mar 27, 2023 (Mar 27, 2023)

Modified

Jun 17, 2026

Description

The OoohBoi Steroids for Elementor WordPress plugin before 2.1.5 has CSRF and broken access control vulnerabilities which leads user with role as low as subscriber to delete attachment.

Vendors: ooohboi steroids for elementor project
Products: ooohboi steroids for elementor
Ecosystems: WordPress
Weakness: CWE-352, CWE-862
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (1.0%)

In the news0 stories

No ingested article mentions this CVE yet.