WordPress Badgeos Vulnerabilities

Wordpress Badgeos vulnerabilities.

JSON RSS CSV 🔔 Create Alert Trigger

2 January 2025

Missing Authorization Vulnerability in BadgeOS by LearningTimes
CVE-2023-47647
WordPressBadgeos4.3MEDIUM

31 August 2023

Stored Cross-Site Scripting Vulnerability in BadgeOS Plugin by WordPress
CVE-2023-2171
WordPressBadgeos5.4MEDIUM
Insecure Direct Object Reference in BadgeOS Plugin for WordPress
CVE-2023-2172
WordpressBadgeos4.3MEDIUM
Insecure Direct Object Reference in BadgeOS Plugin for WordPress
CVE-2023-2173
WordpressBadgeos6.5MEDIUM
Unauthorized Data Modification in BadgeOS Plugin for WordPress
CVE-2023-2174
WordpressBadgeos4.3MEDIUM

25 May 2023

WordPress BadgeOS Plugin <= 3.7.1.6 is vulnerable to Cross Site Request Forgery (CSRF)
CVE-2022-41987
WordPressBadgeos6.3MEDIUM

19 September 2022

BadgeOS < 3.7.1.3 - Subscriber+ SQLi
CVE-2022-2958
WordpressBadgeos8.8HIGH

9 May 2022

BadgeOS <= 3.7.0 - Unauthenticated SQLi
CVE-2022-0817
WordpressBadgeosEPSS 62%9.8CRITICAL