OoohBoi Steroids for Elementor

OoohBoi Steroids for Elementor has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2026; all 3 are fixed as of September 2026. Their average CVSS score is 5.0, and the most serious one scores 6.4 out of 10. 2023 was the busiest year with 2 disclosures.

The most common weakness is Missing Authorization, behind 2 of the records (67%). Other recurring categories include Cross-Site Scripting.

Every one of the 3 issues recorded for OoohBoi Steroids for Elementor has a vendor fix available, so running the current release closes all known holes.

3 independent researchers contributed these findings, one record each. OoohBoi Steroids for Elementor is installed on roughly 40,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.

01234567891010.03.2020Today28.02.20234.3OoohBoi Steroids for Elementor <= 2.1.3 - Missing Authorization leading to Authenticated (Subscriber+) Attachment Deletion CVSS 4.3 · 28.02.202318.04.20234.3OoohBoi Steroids for Elementor <= 2.1.4 - Missing Authorization leading to Authenticated (Subscriber+) Image Upload CVSS 4.3 · 18.04.202304.03.20266.4OoohBoi Steroids for Elementor <= 2.1.24 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple URL Controls CVSS 6.4 · 04.03.2026

Strategic Overview

Avg CVSSMedium
5.0/ 10
Patch Coverage100%
Open

0

Fixed

3

Get automatic notifications for all OoohBoi Steroids for Elementor vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.4CVE-2026-3034

OoohBoi Steroids for Elementor <= 2.1.24 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple URL Controls

Read the full analysis

Vulnerability Records

3 records
Showing 1–3 of 3 reports
OoohBoi Steroids for Elementor banner
Latestv2.1.28

OoohBoi Steroids for Elementor

Sagar Patel

Author

Sagar Patel

4.8(118)
96/100
Last Updated
2026-06-10 (3mo ago)
Active Installs
40,000+
Downloads
1,502,865
Requires WP
6.0+
Requires PHP
7.4+
Tested up to
WP 7.0.4
Created
2020-03-10 (7y ago)

An awesome set of tools, options and settings that expand Elementor defaults. Instead of creating new Elementor Widgets, these act like an upgrade of existing options or the self-standing panels thing. What is new? Fix for the disappearing &#8216;Glider’ slider Add/remove/update preview image Export and Import with preview Works with any 3rd party plugin Cross-domain friendly WP Admin integration Bulk-export and bulk-import support Keep template name on export Complete Full Tutorial of OoohBoi Extensions Watch Now

View on WordPress.org

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C