Unrated severityNVD Advisory· Published Jan 29, 2024· Updated Jun 2, 2025
Woostify Sites Library < 1.4.8 - Subscriber+ Arbitrary Options Update to DoS
CVE-2023-6279
Description
The Woostify Sites Library WordPress plugin before 1.4.8 does not have authorisation in an AJAX action, allowing any authenticated users, such as subscriber to update arbitrary blog options and set them to 'activated' which could lead to DoS when using a specific option name
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- WordPress/Woostify Sites Librarydescription
- Range: <1.4.8
Patches
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- wpscan.com/vulnerability/626bbc7d-0d0f-4418-ac61-666278a1cbdb/mitreexploitvdb-entrytechnical-description
News mentions
0No linked articles in our index yet.