buddypress
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 35 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from September 4, 2012 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →BuddyPress XProfile Image Field <= 3.1.0 - Unauthenticated Arbitrary File Deletion via Signup Image Field Activation Handler
WordPress BuddyPress plugin <= 14.5.2 - SQL Injection vulnerability
WordPress BuddyPress plugin <= 14.5.2 - SQL Injection vulnerability
BuddyPress Instant Chat <= 1.6 - Unauthenticated Stored XSS via Chat Message
BuddyPress <= 14.3.3 - Insecure Direct Object Reference to Notifications Deletion
BuddyPress < 14.5.0 - Subscriber+ Private Messages Disclosure via IDOR
BuddyPress <= 14.5.0 - Authenticated (Subscriber+) PHP Object Injection via XProfile Field Data
Block, Suspend, Report for BuddyPress <= 3.6.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'link' Parameter
BuddyPress: Any authenticated attacker can enumerate another user's complete friend list via IDOR
BuddyPress 14.4.0 REGEXP Injection via @Mention Username Resolution
Monitor buddypress in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.