CVE-2023-25030

Mô tả

Tham khảo

• patchstack.com/database/vulnerability/buymeacoffee/wordpress-buy-me-a-coffee-plugin-3-7-broken-access-control-vulnerability · Third Party Advisory

Lỗ hổng khác của buy me a coffee

• CVE-2023-2082TRUNG BÌNH 5.4The "Buy Me a Coffee – Button and Widget Plugin" plugin for WordPress is vulnerable to Cross-Site Scripting in versions up to, and including…
• CVE-2023-2079CAO 7.1The "Buy Me a Coffee – Button and Widget Plugin" plugin for WordPress is vulnerable to Cross-Site Request Forgery due to missing nonce valid…
• CVE-2023-2078TRUNG BÌNH 4.3The "Buy Me a Coffee – Button and Widget Plugin" plugin for WordPress is vulnerable to unauthorized modification of data due to missing capa…
• CVE-2023-2578TRUNG BÌNH 4.8The Buy Me a Coffee WordPress plugin before 3.7 does not sanitise and escape some of its settings, which could allow high privilege users su…