Medium
CVE-2026-39771
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 12
Reset filters
High
CVE-2026-59514
BuddyBoss Platform <= 3.0.5 - Unauthenticated SQL Injection
High
CVE-2026-56032
BuddyBoss Platform <= 3.0.4 - Authenticated (Subscriber+) PHP Object Injection
Critical
CVE-2025-1909
BuddyBoss Platform Pro <= 2.7.01 - Authentication Bypass via Apple OAuth provider
Medium
CVE-2024-13859
BuddyBoss Platform <= 2.8.50 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'bp_nouveau_ajax_media_save' function
Medium
CVE-2024-13860
BuddyBoss Platform <= 2.8.50 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'bbp_topic_title'
Medium
CVE-2024-13858
BuddyBoss Platform and BuddyBoss Theme <= Multiple Versions - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'invitee_name'
Medium
CVE-2024-13402
BuddyBoss Platform <= 2.7.70 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'link_title'
Medium
CVE-2024-12767
BuddyBoss Platform < 2.7.60 - Insecure Direct Object Reference to Private Post Comment Exposure
Medium
CVE-2024-4886
Buddyboss Platform <= 2.5.91 - Insecure Direct Object Reference to Authenticated (Subscriber+) Comment on Private Post
Medium
CVE-2024-4750
Buddyboss Platform <= 2.5.91 - Insecure Direct Object Reference to Authenticated (Subscriber+) Link on Private Post
High
8fa97e67-08c1-4553-bada-e4c59f797207
Buddyboss Platform <= 1.7.8 - SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.