Product
buddyboss platform
7 known vulnerabilities across versions
Vulnerabilities are listed by affected version. Select any CVE for the full briefing and its intelligence graph.
CVE-2024-12767
CVE-2025-1909
CVE-2024-13860
CVE-2024-13859
CVE-2024-13858
CVE-2024-13402
CVE-2024-4886
< 2.7.60
The buddyboss-platform WordPress plugin before 2.7.60 lacks proper access controls and allows a logged-in user to view comments on
< 2.7.10
The BuddyBoss Platform Pro plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.7.01. T
<= 2.8.50
The Buddyboss Platform plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘bbp_topic_title’ parameter i
<= 2.8.50
The Buddyboss Platform plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘bp_nouveau_ajax_media_save’
<= 2.8.50
The BuddyBoss Platform plugin and BuddyBoss Theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘invitee_na
< 2.8.00
The Buddyboss Platform plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘link_title’ parameter in all
< 2.6.00
The contains an IDOR vulnerability that allows a user to comment on a private post by manipulating the ID included in the request