Filter
-Infinity
0
Trending
Buddypress Force Password ChangeBuddypress Force Password Change <= 0.1 - Authenticated (Subscriber+) Account Takeover via Password Update
4.2
EPSS
0.03%
First published (updated )
WordPress BuddyPress Members OnlyWordPress BuddyPress Members Only plugin <= 3.5.3 - Cross Site Scripting (XSS) vulnerability
6.5
EPSS
0.03%
First published (updated )
BuddyPress WooCommerce My Account IntegrationBuddyPress WooCommerce My Account Integration. Create WooCommerce Member Pages <= 3.4.25 - Cross-Site Request Forgery to Limited Settings Update
4.3
First published (updated )
BuddyPress WooCommerce My Account IntegrationBuddyPress WooCommerce My Account Integration. Create WooCommerce Member Pages <= 3.4.24 - Missing Authorization to Authenticated (Subscriber+) Limited Settings Update
4.3
First published (updated )
BuddyPress Activity Plus ReloadedActivity Plus Reloaded for BuddyPress <= 1.1.1 - Authenticated (Subscriber+) Blind Server-Side Request Forgery
5.4
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
WordPress Mass Messaging in BuddyPress PluginWordPress Mass Messaging in BuddyPress Plugin <= 2.2.1 - Reflected Cross Site Scripting (XSS) vulnerability
7.1
EPSS
0.04%
First published (updated )
BuddyPress Greeting MessageWordPress BuddyPress Greeting Message plugin <= 1.0.3 - Reflected Cross Site Scripting (XSS) vulnerability
7.1
EPSS
0.04%
First published (updated )
BuddyPressBuddyPress <= 14.1.0 - Authenticated (Subscriber+) Directory Traversal
8.1
First published (updated )
BuddyPressBuddyPress Docs <= 2.2.3 - Reflected Cross-Site Scripting
6.1
EPSS
0.05%
First published (updated )
BuddyPressBuddyPress <= 12.4.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
6.4
EPSS
0.12%
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
BuddyPressBuddyPress <= 12.4.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting
6.4
EPSS
0.07%
First published (updated )
Buddypress WooCommerce My Account IntegrationThe "BuddyPress WooCommerce My Account Integration. Create WooCommerce Member Pages" plugin for Word…
8.8
First published (updated )
BuddyPressWordPress BuddyPress Plugin <= 11.3.1 is vulnerable to Cross Site Scripting (XSS)
6.5
First published (updated )
BuddyPressBuddyPress privilege escalation via REST API
First published (updated )
BuddyPressPrivate data exposure via REST API in BuddyPress
8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
BuddyPressThe Group creation process in the Buddypress plugin before 1.9.2 for WordPress allows remote authent…
6.5
First published (updated )
composer/buddypress/buddypressAn issue was discovered in includes/component.php in the BuddyPress Docs plugin before 1.9.3 for Wor…
4.3
First published (updated )