Plugin icon

Buy Me a Coffee – Button and Widget Plugin

buymeacoffee

Vulnerabilities:

4

Last Updated:

March 31, 2026

Active Installs:

6000

Published
Title
Fixed in
CVSS
Published
2023-07-13
Title
Buy Me a Coffee < 3.7 - Subscriber+ Stored Cross-Site Scripting
Fixed in
Fixed in 3.7
CVSS
6.4 (medium)
Published
2023-07-10
Title
Buy Me a Coffee – Button and Widget Plugin < 3.8 - Cross-Site Request Forgery
Fixed in
Fixed in 3.8
CVSS
8.3 (high)
Published
2023-07-10
Title
Buy Me a Coffee – Button and Widget Plugin < 3.8 - Subscriber+ Unauthorized Data Modification
Fixed in
Fixed in 3.8
CVSS
7.3 (high)
Published
2023-06-19
Title
Buy Me a Coffee < 3.7 - Admin+ Stored XSS
Fixed in
Fixed in 3.7
CVSS
3.5 (low)