LLearningTimes

Products

Exploited and recent CVEs

• CVE-2023-47647 Medium 4.3 WordPress BadgeOS plugin <= 3.7.1.6 - Broken Access Control vulnerability 0.5%
• CVE-2023-2173 Medium 6.5 BadgeOS <= 3.7.1.6 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary Post Deletion 0.5%
• CVE-2023-2171 Medium 5.4 BadgeOS <= 3.7.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode 0.4%
• CVE-2023-2174 Medium 4.3 BadgeOS <= 3.7.1.6 - Missing Authorization in delete_badgeos_log_entries 0.4%
• CVE-2023-2172 Medium 4.3 BadgeOS <= 3.7.1.6 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary Post Title Overwrite 0.5%
• CVE-2022-41987 Medium 6.3 WordPress BadgeOS Plugin <= 3.7.1.6 is vulnerable to Cross Site Request Forgery (CSRF) 0.2%