CyberSecBulletin

Woostify Sites Library vulnerabilities

We track 1 vulnerability in Woostify Sites Library products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on January 29, 2024.

1vulnerabilities
0critical
1high
0exploited
7.1average CVSS score

Latest Woostify Sites Library vulnerabilities

  • 7.1 High severity

    Woostify Sites Library: Missing Authorization

    CVE-2023-6279Woostify Sites Library

    The Woostify Sites Library WordPress plugin before 1.4.8 does not have authorisation in an AJAX action, allowing any authenticated users, such as subscriber to update arbitrary blog options and set them to 'activated' which could lead to DoS when using a speci