CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 4.3. It affects WordPress.
CVE
CVE-2023-1169
Severity
MEDIUM
CVSS
4.3
EPSS
0.57%
WordPress
Original NVD Description
The OoohBoi Steroids for Elementor plugin for WordPress is vulnerable to missing authorization due to a missing capability check on the 'file_uploader_callback' function in versions up to, and including, 2.1.4. This makes it possible for subscriber-level attackers to upload image attachments to the site.
Related CVEs
Other vulnerabilities affecting the same vendor(s)