Wooey versions prior to 0.13.3rc1 contain an incorrect privilege assignment vulnerability in the add_or_update_script function within the API endpoint. This flaw allows remote attackers to perform unauthorized actions due to improper authorization checks. The issue is resolved by upgrading to versions 0.13.3rc1 or later.