LearningTimes BadgeOS vulnerabilities

CVEs per yearBy the year they were published

1. 20235
2. 20251

Newest CVEs

• CVE-2023-47647

  WordPress BadgeOS plugin <= 3.7.1.6 - Broken Access Control vulnerability

  LearningTimes · BadgeOS

  Medium4.3
• CVE-2023-2173

  BadgeOS <= 3.7.1.6 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary Post Deletion

  learningtimes · BadgeOS

  Medium6.5
• CVE-2023-2171

  BadgeOS <= 3.7.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

  learningtimes · BadgeOS

  Medium5.4
• CVE-2023-2174

  BadgeOS <= 3.7.1.6 - Missing Authorization in delete_badgeos_log_entries

  learningtimes · BadgeOS

  Medium4.3
• CVE-2023-2172

  BadgeOS <= 3.7.1.6 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary Post Title Overwrite

  learningtimes · BadgeOS

  Medium4.3
• CVE-2022-41987

  WordPress BadgeOS Plugin <= 3.7.1.6 is vulnerable to Cross Site Request Forgery (CSRF)

  LearningTimes · BadgeOS

  Medium6.3