Vulnerability archive

Understand vulnerabilities. Protect your applications.

Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.

Platform

Severity

Disclosed from

Disclosed to

Vulnerability archive 5

Reset filters

Medium 10.06.2026

CVE-2026-53675

BuddyPress: Any authenticated attacker can enumerate another user's complete friend list via IDOR

High 10.06.2026

CVE-2026-53673

BuddyPress: Authenticated attackers can access arbitrary private message threads via user_id request parameter

High 16.03.2021

CVE-2021-21389

BuddyPress 5.0.0-7.2.0 - Privilege Escalation via REST API

High 02.01.2020

CVE-2020-5244

BuddyPress <= 5.1.1 - Sensitive Information Disclosure

Medium 17.03.2017

CVE-2017-6954

BuddyPress Docs <= 1.9.2 - Authorization Bypass

Know which vulnerabilities affect your application

With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.

Connect your application