WordPress plugin
Woostify Sites Library security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical0
- High1
- Medium3
- Low0
All Woostify Sites Library vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium5.3 | Missing Authorization ≤1.6.2No patch available | CVE-2025-66076 | |
| High8.1 | Missing Authorization to Authenticated (Subscriber+) Limited Options Update ≤1.4.7Update to 1.4.8 | CVE-2023-6279 | |
| Medium4.3 | Missing Authorization ≤3.6.0Update to 3.6.1 | — | |
| Medium4.3 | Cross-Site Request Forgery ≤3.6.0Update to 3.6.1 | CVE-2022-47150 |
- Medium5.3Missing Authorization
≤1.6.2No patch available
- High8.1Missing Authorization to Authenticated (Subscriber+) Limited Options Update
≤1.4.7Update to 1.4.8
- Medium4.3Missing Authorization
≤3.6.0Update to 3.6.1
- Medium4.3Cross-Site Request Forgery
≤3.6.0Update to 3.6.1
Woostify Sites Library: common questions
Does Woostify Sites Library have known vulnerabilities?
Yes. VulnCrest Radar lists 4 known vulnerabilities in Woostify Sites Library: 1 high, 3 medium. At least one is not fixed in the latest version.
How do I check which version of Woostify Sites Library I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Woostify Sites Library vulnerability?
CVE-2025-66076, published Jun 29, 2026: Woostify Sites Library <= 1.6.2 - Missing Authorization. Severity: Medium (CVSS 5.3).
Is any Woostify Sites Library vulnerability listed in CISA KEV?
No. None of the known Woostify Sites Library vulnerabilities is currently listed in the CISA KEV catalog.