Buy Me A Coffee Security Vulnerabilities and Issues — Buy Me A Coffee CVE List

Lucene search

BuymeacoffeeBuy Me A Coffee

2 matches found

CVE•added 2024/06/12 10:15 a.m.•43 views

CVE-2023-25030

Missing Authorization vulnerability in Buy Me a Coffee.This issue affects Buy Me a Coffee: from n/a through 3.7.

4.3CVSS4.9AI score0.00087EPSS

CVE•added 2023/07/10 4:15 p.m.•26 views

CVE-2023-2578

The Buy Me a Coffee WordPress plugin before 3.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).

4.8CVSS4.9AI score0.00076EPSS