What’s Vulnerable › Products

buymeacoffee Buy Me a Coffee – Button and Widget Plugin vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 0 published in the last 12 months.

Check whether your buymeacoffee Buy Me a Coffee – Button and Widget Plugin version is affected

Latest buymeacoffee Buy Me a Coffee – Button and Widget Plugin vulnerabilities

• CVE-2023-25030 — WordPress Buy Me a Coffee plugin <= 3.7 - Broken Access Control vulnerability (CVSS 4.3)
• CVE-2023-2082 — Buy Me a Coffee – Button and Widget Plugin <= 3.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting (CVSS 5.4)
• CVE-2023-2079 — Buy Me a Coffee – Button and Widget Plugin <= 3.7 - Cross-Site Request Forgery (CVSS 7.1)
• CVE-2023-2078 — Buy Me a Coffee – Button and Widget Plugin <= 3.7 - Missing Authorization (CVSS 4.3)
• CVE-2023-2578 — Buy Me a Coffee < 3.7 - Admin+ Stored XSS (CVSS 4.8)