CVE-2023-25030

概要

参考情報

• patchstack.com/database/vulnerability/buymeacoffee/wordpress-buy-me-a-coffee-plugin-3-7-broken-access-control-vulnerability · Third Party Advisory

buy me a coffee のその他の脆弱性

• CVE-2023-2082中 5.4The "Buy Me a Coffee – Button and Widget Plugin" plugin for WordPress is vulnerable to Cross-Site Scripting in versions up to, and including…
• CVE-2023-2079高 7.1The "Buy Me a Coffee – Button and Widget Plugin" plugin for WordPress is vulnerable to Cross-Site Request Forgery due to missing nonce valid…
• CVE-2023-2078中 4.3The "Buy Me a Coffee – Button and Widget Plugin" plugin for WordPress is vulnerable to unauthorized modification of data due to missing capa…
• CVE-2023-2578中 4.8The Buy Me a Coffee WordPress plugin before 3.7 does not sanitise and escape some of its settings, which could allow high privilege users su…