Woostify Sites Library

Woostify Sites Library has 4 disclosed vulnerabilities in the WordSec catalog, reported between 2022 and 2026; 3 are fixed and 1 remains unpatched as of September 2026. Their average CVSS score is 5.5, and the most serious one scores 8.1 out of 10. Severity breakdown: 0 critical and 1 high. 2022 was the busiest year with 2 disclosures.

The most common weakness is Missing Authorization, behind 3 of the records (75%). Other recurring categories include Cross-Site Request Forgery (CSRF).

3 of the records (75%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2026.

3 independent researchers contributed these findings, one record each. Woostify Sites Library is installed on roughly 10,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.

Strategic Overview

Avg CVSSMedium

5.5/ 10

Patch Coverage75%

Open

Fixed

Get automatic notifications for all Woostify Sites Library vulnerabilities before they are exploited.

Most severe open issueCVSS 5.3CVE-2025-66076

Woostify Sites Library <= 1.6.2 - Missing Authorization

Read the full analysis

Vulnerability Records

4 records


2026-06-29 00:00	Woostify Sites Library <= 1.6.2 - Missing Authorization Woostify Sites Library <= 1.6.2	`CVE-2025-66076`	5.3 Medium	Legion Hunter	No
2024-01-31 00:00	Woostify Sites Library <= 1.4.7 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update Woostify Sites Library <= 1.4.7	`CVE-2023-6279`	8.1 High	Krzysztof Zając	Yes
2022-12-16 00:00	Appsero <= 1.2.1 - Missing Authorization Woostify Sites Library <= 1.4.3	`N/A`	4.3 Medium	Anonymous	Yes
2022-12-14 00:00	Appsero <= 1.2.0 - Cross-Site Request Forgery Woostify Sites Library <= 1.4.3	`CVE-2022-47150`	4.3 Medium	István Márton	Yes

Showing 1–4 of 4 reports

Latestv1.6.2

Woostify Sites Library

Author

dylan ngo

5.0(2)

100/100

Last Updated

2026-03-13 (6mo ago)

Active Installs

10,000+

Downloads

379,980

Requires WP

4.4+

Requires PHP

7.0+

Tested up to

WP 6.9.7

Created

2019-01-21 (8y ago)

This plugin is an add-on for the Woostify WordPress Theme. It gives users a collection of demo sites to choose and import. Here is how it works: Install required plugins. Choose a demo site to import. Import site content and media. More info: https://woostify.com Done! Privacy Policy Woostify Sites Library uses Appsero SDK to collect some telemetry data upon user’s confirmation. This helps us to troubleshoot problems faster & make product improvements. Appsero SDK does not gather any data by default. The SDK only starts gathering basic telemetry data when a user allows it via the admin notice. We collect the data to ensure a great user experience for all our users. Integrating Appsero SDK DOES NOT IMMEDIATELY start gathering data, without confirmation from users in any case. Learn more about how Appsero collects and uses this data.

View on WordPress.org