WordPress plugin
OoohBoi Steroids for Elementor security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 3 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High0
- Medium3
- Low0
All OoohBoi Steroids for Elementor vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium6.4 | Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple URL Controls ≤2.1.24Update to 2.1.25 | CVE-2026-3034 | |
| Medium4.3 | Missing Authorization leading to Authenticated (Subscriber+) Image Upload ≤2.1.4Update to 2.1.5 | CVE-2023-1169 | |
| Medium4.3 | Missing Authorization leading to Authenticated (Subscriber+) Attachment Deletion ≤2.1.3Update to 2.1.5 | CVE-2023-0336 |
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple URL Controls
≤2.1.24Update to 2.1.25
- Medium4.3Missing Authorization leading to Authenticated (Subscriber+) Image Upload
≤2.1.4Update to 2.1.5
- Medium4.3Missing Authorization leading to Authenticated (Subscriber+) Attachment Deletion
≤2.1.3Update to 2.1.5
OoohBoi Steroids for Elementor: common questions
Does OoohBoi Steroids for Elementor have known vulnerabilities?
Yes. VulnCrest Radar lists 3 known vulnerabilities in OoohBoi Steroids for Elementor: 3 medium. None are known to affect version null.
How do I check which version of OoohBoi Steroids for Elementor I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent OoohBoi Steroids for Elementor vulnerability?
CVE-2026-3034, published Mar 4, 2026: OoohBoi Steroids for Elementor <= 2.1.24 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple URL Controls. Severity: Medium (CVSS 6.4).
Is any OoohBoi Steroids for Elementor vulnerability listed in CISA KEV?
No. None of the known OoohBoi Steroids for Elementor vulnerabilities is currently listed in the CISA KEV catalog.