CVE-2023-25030

Description

References

• patchstack.com/database/vulnerability/buymeacoffee/wordpress-buy-me-a-coffee-plugin-3-7-broken-access-control-vulnerability · Third Party Advisory

Weitere Schwachstellen in buy me a coffee

• CVE-2023-2082MITTEL 5.4The "Buy Me a Coffee – Button and Widget Plugin" plugin for WordPress is vulnerable to Cross-Site Scripting in versions up to, and including…
• CVE-2023-2079HOCH 7.1The "Buy Me a Coffee – Button and Widget Plugin" plugin for WordPress is vulnerable to Cross-Site Request Forgery due to missing nonce valid…
• CVE-2023-2078MITTEL 4.3The "Buy Me a Coffee – Button and Widget Plugin" plugin for WordPress is vulnerable to unauthorized modification of data due to missing capa…
• CVE-2023-2578MITTEL 4.8The Buy Me a Coffee WordPress plugin before 3.7 does not sanitise and escape some of its settings, which could allow high privilege users su…