WordPress Badgeos Vulnerabilities

Wordpress Badgeos vulnerabilities.

31 August 2023

Stored Cross-Site Scripting Vulnerability in BadgeOS Plugin by WordPress
CVE-2023-2171
WordpressBadgeOS5.4MEDIUM
Insecure Direct Object Reference in BadgeOS Plugin for WordPress
CVE-2023-2172
WordpressBadgeos4.3MEDIUM
Unauthorized Data Modification in BadgeOS Plugin for WordPress
CVE-2023-2174
WordpressBadgeos4.3MEDIUM
Insecure Direct Object Reference in BadgeOS Plugin for WordPress
CVE-2023-2173
WordpressBadgeos6.5MEDIUM

19 September 2022

BadgeOS < 3.7.1.3 - Subscriber+ SQLi
CVE-2022-2958
WordpressBadgeos8.8HIGH

9 May 2022

BadgeOS <= 3.7.0 - Unauthenticated SQLi
CVE-2022-0817
WordpressBadgeos9.8CRITICAL

No more vulnerabilities to load.