Medium
402bbe9c-cf4d-457c-97ac-149e14ea6f47
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 146
Reset filters
High
3166549e-b52e-41e8-8b5c-1a1a0558c858
BuddyPress <= 7.2.1 - Insufficient Privilege De-escalation
Medium
15b4b132-1e27-454d-9ba0-9d1a552e1844
BuddyPress <= 7.2.1 - Missing Authorization to Group Creation
Medium
04601634-d707-44a7-9b5f-46c4b9687469
BuddyPress <= 7.2.0 - Authorization Bypass to Friend Invite
Medium
5d7bcd71-e299-47fe-a749-e72c49b8129e
BuddyPress - 7.0.0 - 7.2.0 - Insufficient Privilege De-escalation
High
CVE-2021-21389
BuddyPress 5.0.0-7.2.0 - Privilege Escalation via REST API
Medium
001a7d43-4b00-42e9-bb0c-94a9d5721166
BuddyPress <= 7.2.0 - Authorization Bypass to Private Message Disclosure
Medium
4bd169bc-1538-400f-b2cd-0bbcf1fea7ee
BuddyPress <= 6.3.0 - Insufficient Input Validation
High
CVE-2020-5244
BuddyPress <= 5.1.1 - Sensitive Information Disclosure
Medium
ed5cf097-1b27-4d20-b7b2-2aa909bce042
BuddyPress <= 5.1.0 - Denial of Service
High
3fda31fa-efc9-44b9-99ba-9e3e23aa2ee0
Freemius SDK <= 2.2.3 - Missing Authorization to Arbitrary Options Update
Medium
dcd463de-ae26-4477-89e1-21f4aada1e86
BuddyPress Xprofile Custom Fields Type <= 2.6.3 - Arbitrary File Deletion
Medium
CVE-2017-1000227
Salutation < 3.0.16 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2017-6954
BuddyPress Docs <= 1.9.2 - Authorization Bypass
Critical
5a3e2d1c-8879-4def-8861-3d6d8b683b7e
BuddyPress 2.0 - 2.7.3 - Unauthenticated Arbitrary File Deletion
Critical
be97e1ca-6c9c-4641-ba7c-bbb14a58d99e
rtMedia for WordPress, BuddyPress and bbPress <= 4.2 - Arbitary File Upload
Medium
7b19b0b2-d6cb-4d92-9925-c77d517ddfb7
rtMedia for WordPress, BuddyPress and bbPress <= 3.10.1 - Cross-Site Scripting
High
9bed2e86-1cc0-4fed-a44f-0c495c423e22
BuddyPress <= 2.3.4 - Privilege Escalation
High
CVE-2015-9455
BuddyPress Activity Plus <= 1.5 - Cross-Site Request Forgery
High
98527ebf-26a3-4900-84b5-3d2245783e8e
BuddyPress BP Gallery Plus <= 1.2.5 - Cross-Site Scripting
Critical
9ba74e58-0647-4283-9fa3-428976c54474
rtMedia for WordPress, BuddyPress and bbPress < 3.7.40 - SQL Injection
Critical
1814ad55-0807-4def-b584-6dbbc5d6eb72
rtMedia for WordPress, BuddyPress and bbPress <= 3.9.5 - Local File Inclusion
Medium
CVE-2014-1888
BuddyPress <= 1.9.1 - Stored Cross-Site Scripting
Medium
CVE-2014-1889
BuddyPress <= 1.9.1 - Authorization Bypass
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.