badgeos
WordPress · Plugin
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| BadgeOS <= 3.7.1.6 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary Post Deletion | badgeos | WordPress | Medium | No fix reported | |
| BadgeOS <= 3.7.1.6 - Cross-Site Request Forgery | badgeos | WordPress | Medium | No fix reported | |
| BadgeOS <= 3.7.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode | badgeos | WordPress | Medium | No fix reported | |
| BadgeOS <= 3.7.0 - Unauthenticated SQL Injection | badgeos | WordPress | Critical | Fix reported | |
| BadgeOS <= 3.7.1.6 - Missing Authorization in delete_badgeos_log_entries | badgeos | WordPress | Medium | No fix reported | |
| BadgeOS <= 3.7.1.6 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary Post Title Overwrite | badgeos | WordPress | Medium | No fix reported | |
| BadgeOS <= 3.7.1.6 - Missing Authorization | badgeos | WordPress | Medium | No fix reported | |
| BadgeOS <= 3.7.1.2 - Authenticated (Subscriber+) SQL Injection | badgeos | WordPress | High | Fix reported |