Security
فارسی
All products

buddyboss-platform

WordPress · Plugin
13 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
BuddyBoss Platform <= 3.5.0 - Authenticated (Subscriber+) Privilege EscalationCVE-2026-118082 buddyboss-platform WordPress High Fix reported
BuddyBoss Platform <= 3.6.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Group NameCVE-2026-96554 buddyboss-platform WordPress Medium Fix reported
BuddyBoss Platform <= 3.1.0 - Authenticated (Subscriber+) SQL InjectionCVE-2026-39771 buddyboss-platform WordPress Medium No fix reported
BuddyBoss Platform <= 3.0.5 - Unauthenticated SQL InjectionCVE-2026-59514 buddyboss-platform WordPress High Fix reported
BuddyBoss Platform <= 3.0.4 - Authenticated (Subscriber+) PHP Object InjectionCVE-2026-56032 buddyboss-platform WordPress High Fix reported
BuddyBoss Platform < 2.7.60 - Insecure Direct Object Reference to Private Post Comment ExposureCVE-2024-12767 buddyboss-platform WordPress Medium Fix reported
BuddyBoss Platform and BuddyBoss Theme <= Multiple Versions - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'invitee_name'CVE-2024-13858 buddyboss-platformbuddyboss-theme WordPress Medium Fix reported
BuddyBoss Platform <= 2.8.50 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'bp_nouveau_ajax_media_save' functionCVE-2024-13859 buddyboss-platform WordPress Medium Fix reported
BuddyBoss Platform <= 2.8.50 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'bbp_topic_title'CVE-2024-13860 buddyboss-platform WordPress Medium Fix reported
BuddyBoss Platform <= 2.7.70 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'link_title'CVE-2024-13402 buddyboss-platform WordPress Medium Fix reported
Buddyboss Platform <= 2.5.91 - Insecure Direct Object Reference to Authenticated (Subscriber+) Link on Private PostCVE-2024-4750 buddyboss-platform WordPress Medium Fix reported
Buddyboss Platform <= 2.5.91 - Insecure Direct Object Reference to Authenticated (Subscriber+) Comment on Private PostCVE-2024-4886 buddyboss-platform WordPress Medium Fix reported
Buddyboss Platform <= 1.7.8 - SQL Injection buddyboss-platform WordPress High Fix reported