buddypress/buddypress
Composer · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| BuddyPress: Any authenticated attacker can enumerate another user's complete friend list via IDOR | buddypress/buddypressbuddypress | ComposerWordPress | Medium | No fix reported | |
| BuddyPress: Authenticated attackers can access arbitrary private message threads via user_id request parameter | buddypress/buddypressbuddypress | ComposerWordPress | High | Fix reported | |
| BuddyPress privilege escalation via REST API | buddypress/buddypressbuddypress | ComposerWordPress | High | Fix reported | |
| Private data exposure via REST API in BuddyPress | buddypress/buddypressbuddypress | ComposerWordPress | High | Fix reported | |
| BuddyPress Docs plugin Improper Privilege Management | buddypress/buddypressbuddypress-docs | ComposerWordPress | Medium | Fix reported |