Learningtimes Badgeos
6 CVEs affecting Learningtimes Badgeos. Latest disclosed: 2025-01-02. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-2173 | Medium | 6.5 | 2023-08-31 | The BadgeOS plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 3.7.1.6. This is due to improper validatio… |
CVE-2022-41987 | Medium | 6.3 | 2023-05-25 | Cross-Site Request Forgery (CSRF) vulnerability in LearningTimes BadgeOS plugin <= 3.7.1.6 versions. |
CVE-2023-2171 | Medium | 5.4 | 2023-08-31 | The BadgeOS plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in versions up to, and including, 3.7.1.6 due to in… |
CVE-2023-47647 | Medium | 4.3 | 2025-01-02 | Missing Authorization vulnerability in LearningTimes BadgeOS allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BadgeOS… |
CVE-2023-2174 | Medium | 4.3 | 2023-08-31 | The BadgeOS plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the delete_badgeos_log_entries functio… |
CVE-2023-2172 | Medium | 4.3 | 2023-08-31 | The BadgeOS plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 3.7.1.6. This is due to improper validatio… |