Skip to content
OpenAdvisories

Vendor

Buy Me a Coffee

4 known vulnerabilities.

Products

Buy Me a Coffee – Button and Widget Plugin 3 Buy Me a Coffee 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.1
    CVE-2023-2079

    Buy Me a Coffee – Button and Widget Plugin <= 3.7 - Cross-Site Request Forgery

    The "Buy Me a Coffee – Button and Widget Plugin" plugin for WordPress is vulnerable to Cross-Site Request Forgery due to missing nonce validation on the recieve_post, bmc_disconnect, name_post, and widget_post functions in versions up to, and including, 3.7. …

    Buy Me a Coffee Buy Me a Coffee – Button and Widget Plugin Web / CMS
  • High 7.3
    CVE-2023-2078

    Buy Me a Coffee – Button and Widget Plugin <= 3.7 - Missing Authorization

    The "Buy Me a Coffee – Button and Widget Plugin" plugin for WordPress is vulnerable to unauthorized modification of data due to missing capability checks on the recieve_post, bmc_disconnect, name_post, and widget_post functions in versions up to, and includin…

    Buy Me a Coffee Buy Me a Coffee – Button and Widget Plugin Web / CMS