Known Vulnerabilities for Buy Me A Coffee by Buymeacoffee
Listed below are 5 of the newest known vulnerabilities associated with "Buy Me A Coffee" by "Buymeacoffee".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2025-69108 json | Unauthenticated PHP Object Injection in Hot Coffee <= 1.7 versions. | Not Provided | 2026-06-17 | 2026-06-17 |
| CVE-2023-39056 json | An information leak in Coffee-jumbo v13.6.1 allows attackers to obtain the channel access token and send crafted messages. | Not Provided | 2023-09-18 | 2026-07-09 |
| CVE-2023-25030 json | Missing Authorization vulnerability in Buy Me a Coffee.This issue affects Buy Me a Coffee: from n/a through 3.7. | Not Provided | 2024-06-12 | 2026-04-28 |
| CVE-2023-2578 json | The Buy Me a Coffee WordPress plugin before 3.7 does not sanitise and escape some of its settings, which could allow high pri... | 4.8 - MEDIUM | 2023-07-10 | 2023-11-07 |
| CVE-2023-2082 json | Not Provided | 2023-07-14 | 2026-04-08 | |
| CVE-2023-2079 json | Not Provided | 2023-07-11 | 2026-04-08 | |
| CVE-2023-2078 json | Not Provided | 2023-07-11 | 2026-04-08 |