woostify records
3 published records for vendor woostify.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 33.3%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-862 Missing Authorization2
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
3 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
28Monitor | CVE-2023-6279No exploit | Woostify Sites Library < 1.4.8 - Subscriber+ Arbitrary Options Update to DoSwoostify · sites library · CWE-862 | High7.1 | — | 0.5% | Jan 29, 2024 |
21Monitor | CVE-2024-5006No exploit | Boostify Header Footer Builder for Elementor <= 1.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via size Parameterwoostify · boostify header footer builder for elementor · CWE-79 | Medium5.4 | — | 0.3% | Jun 5, 2024 |
17Monitor | CVE-2024-4788No exploit | Boostify Header Footer Builder for Elementor <= 1.3.5 - Missing Authorization to Page/Post Creationwoostify · boostify header footer builder for elementor · CWE-862 | Medium4.3 | — | 0.3% | Jun 5, 2024 |
- CVE-2023-627928Monitor
Woostify Sites Library < 1.4.8 - Subscriber+ Arbitrary Options Update to DoS
HighCVSS 7.1No exploitEPSS 0%woostify · sites libraryJan 29, 2024
- CVE-2024-500621Monitor
Boostify Header Footer Builder for Elementor <= 1.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via size Parameter
MediumCVSS 5.4No exploitEPSS 0%woostify · boostify header footer builder for elementorJun 5, 2024
- CVE-2024-478817Monitor
Boostify Header Footer Builder for Elementor <= 1.3.5 - Missing Authorization to Page/Post Creation
MediumCVSS 4.3No exploitEPSS 0%woostify · boostify header footer builder for elementorJun 5, 2024