OoohBoi Steroids for Elementor < 2.1.5 - Arbitrary File Upload

The plugin does not properly protect its file_uploader_callback function with capability checks, which makes it possible for attackers with a low-privilege account, like subscribers, to upload image attachments to the site.