I’ve also had warnings from WordFence. Anything on this from the devs?
I received these warnings as well… Any updates?
Me too, getting the following warning in Wordfence:
Plugin Name: OoohBoi Steroids for Elementor
Current Plugin Version: 2.1.3
Details: To protect your site from this vulnerability, the safest option is to deactivate and completely remove “OoohBoi Steroids for Elementor” until a patched version is available. Get more information.(opens in new tab)
Repository URL: https://ww.wp.xz.cn/plugins/ooohboi-steroids-for-elementor(opens in new tab)
Vulnerability Information: https://www.wordfence.com/threat-intel/vulnerabilities/id/c24c57e5-2b42-40db-816a-f1327d1ac09b
I have no clue what this is all about, sorry! If anyone could point me to the right direction, I’ll push the patch ASAP.
chatGPT response:
Missing Authorization for Attachment Deletion
It’s possible that missing authorization could lead to an authenticated user (such as a subscriber) being able to delete attachments on a website or application. This can happen if the website or application doesn’t properly check the user’s permissions before allowing them to delete an attachment.
In such a scenario, an attacker could potentially gain access to an authenticated user’s account, either through hacking or by obtaining their login credentials. Once logged in, the attacker could attempt to delete attachments associated with the account.
If the website or application doesn’t properly check the user’s authorization, the attacker may be able to successfully delete attachments, even though they are not authorized to do so. This could result in the loss of important data or information, as well as damage to the reputation of the website or application.
To prevent this type of security vulnerability, it’s important for websites and applications to properly authenticate and authorize users, and to implement strong access control measures. This can include requiring multi-factor authentication, limiting the types of actions that authenticated users can perform, and implementing strict permission levels for different types of users. Regular security audits and testing can also help to identify and address potential vulnerabilities before they can be exploited by attackers.
Hi @ooohboi
I think the plugin does not check the user’s capability when calling the ‘file_batch_delete_callback’ function, which allows any subscriber-level user to delete attachments via AJAX. This could lead to data loss or information disclosure if an attacker exploits this vulnerability.
I suggest you add a capability check to make sure the user has permission to delete attachments. For example, you could use the current_user_can(‘delete_posts’) function before performing any action.
Thanks
Regards
@youghalonline – that’s not entirely helpful, in spite of the fact provided by chatGPT.
@eduk2 – that makes more sense and it should be the “Better Templates Library” extension related. I’ll take a look, thank you for the hint!
@ooohboi You are welcome. I hope you can fix it and that you can pass the Wordfence validation. I’ll check it to see if I can help with something else 🙂
-
This reply was modified 3 years, 2 months ago by
Eduardo.
The patch is being pushed. I hope it’ll be all right now. Any feedback is welcome. My apologies for any inconvenience!
@ooohboi I totally agree, the ChatGPT wasn’t entirely helpful but sometimes any response is better than no response.
Keep up the good work.
@ooohboi – You might find this helpful – https://wpscan.com/vulnerability/ac74df9a-6fbf-4411-a501-97eba1ad1895
Says current version 2.1.4 and lower are vulnerable and shows proof of concept code.
2.1.5 with the patch has been released. Cheers!
