Lucene search
HistoryJun 12, 2024 - 10:15 a.m.
CVE-2023-25030
missing authorization
buy me a coffee
vulnerability
CVSS3
4.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
EPSS
0
Percentile
14.5%
Missing Authorization vulnerability in Buy Me a Coffee.This issue affects Buy Me a Coffee: from n/a through 3.7.
Affected configurations
Node
buymeacoffeebuy_me_a_coffeeRange<3.8wordpress
| Vendor | Product | Version | CPE |
|---|---|---|---|
| buymeacoffee | buy_me_a_coffee | * | cpe:2.3:a:buymeacoffee:buy_me_a_coffee:*:*:*:*:*:wordpress:*:* |
Related
vulnrichment
vulnrichment
cve
cve
CVE-2023-25030
2024-06-12 10:15:23
CVE-2023-2078
2023-07-11 03:15:09
cvelist
cvelist
CVE-2023-25030 WordPress Buy Me a Coffee plugin <= 3.7 - Broken Access Control vulnerability
2024-06-12 09:39:50
CVE-2023-2078
2023-07-11 02:03:55
nvd
nvd
CVE-2023-2078
2023-07-11 03:15:09
prion
prion
Design/Logic Flaw
2023-07-11 03:15:00
CVSS3
4.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
EPSS
0
Percentile
14.5%
Related for NVD:CVE-2023-25030