Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 146
Reset filtersFreemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get
BuddyBuilder - BuddyPress Builder for Elementor <= 1.7.3 - Cross-Site Request Forgery
Wbcom Designs – BuddyPress Activity Social Share <= 3.5.0 - Cross-Site Request Forgery
Youzify <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Appsero <= 1.2.1 - Missing Authorization
Appsero <= 1.2.0 - Cross-Site Request Forgery
Activity Reactions For Buddypress <= 1.0.22 - Missing Authorization
Activity Reactions For Buddypress <= 1.0.22 - Cross-Site Request Forgery
BuddyPress xProfile Checkout Manager for WooCommerce <= 1.3.5 - Stored Cross-Site Scripting
Youzify <= 1.1.9 - SQL Injection
Wbcom Designs – BuddyPress Group Reviews <= 2.8.3 - Unauthorized AJAX Actions due to Nonce Bypass
BuddyForms Members <= 1.4.21 - Cross-Site Scripting
BuddyForms Hook Fields <= 1.3.8 - Cross-Site Scripting
Wbcom Designs – BuddyPress Group Reviews <= 2.8.1 - Cross-Site Scripting
Wbcom Designs Plugins (Various Versions) - Arbitrary Plugin Installation, Activation and Deactivation
Freemius SDK <= 2.4.2 - Missing Authorization Checks
BuddyPress <= 9.0.0 - Information Disclosure via REST API
BuddyPress <= 9.0.0 - SQL Injection
BuddyPress Customer.io Analytics Integration <= 1.1.6 - Cross-Site Request Forgery
Youzify <= 1.0.6 - Stored Cross-Site Scripting
Jannah <= 5.4.4 - Reflected Cross-Site Scripting
Jannah - Newspaper Magazine News BuddyPress AMP < 5.4.4 - Reflected Cross-Site Scripting
BuddyPress <= 7.2.1 - Missing Authorization to Unauthorized Group Access
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.