Skip to content
OpenAdvisories

Vendor

Buy Me a Coffee

4 known vulnerabilities.

Products

Buy Me a Coffee – Button and Widget Plugin 3 Buy Me a Coffee 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.3
    CVE-2023-25030

    WordPress Buy Me a Coffee plugin <= 3.7 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Buy Me a Coffee.This issue affects Buy Me a Coffee: from n/a through 3.7.

    Buy Me a Coffee Buy Me a Coffee
  • Medium 6.4
    CVE-2023-2082

    Buy Me a Coffee – Button and Widget Plugin <= 3.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting

    The "Buy Me a Coffee – Button and Widget Plugin" plugin for WordPress is vulnerable to Cross-Site Scripting in versions up to, and including, 3.6 due to insufficient sanitization and escaping on the 'text value set via the bmc_post_reception action. This make…

    Buy Me a Coffee Buy Me a Coffee – Button and Widget Plugin Web / CMS