Plugin icon

bbPress

bbpress

Vulnerabilities:

10

Last Updated:

July 2, 2025

Active Installs:

100000

Published
Title
Fixed in
CVSS
Published
2025-03-04
Title
bbPress < 2.6.12 - Cross-Site Request Forgery to Limited Privilege Escalation
Fixed in
Fixed in 2.6.12
CVSS
6.3 (medium)
Published
2020-05-28
Title
bbPress 2.6-2.6.5 - Authenticated Privilege Escalation via the Super Moderator feature
Fixed in
Fixed in 2.6.5
CVSS
8.7 (high)
Published
2020-05-28
Title
bbPress < 2.6.5 - Unauthenticated Privilege Escalation when New User Registration enabled
Fixed in
Fixed in 2.6.5
CVSS
10.0 (critical)
Published
2020-05-28
Title
bbPress < 2.6.5 - Authenticated Stored Cross-Site Scripting via the forums list table
Fixed in
Fixed in 2.6.5
CVSS
6.2 (medium)
Published
2019-11-12
Title
bbPress < 2.6.0 - Subscriber+ Stored Cross-Site Scripting via Post Slug
Fixed in
Fixed in 2.6.0
CVSS
5.4 (medium)
Published
2017-11-13
Title
bbPress <= 2.5.12 - Unauthenticated SQL Injection
Fixed in
Fixed in 2.5.13
CVSS
n/a
Published
2016-07-13
Title
bbPress <= 2.5.9 - Display Name & Avatar Potential Cross-Site Scripting (XSS)
Fixed in
Fixed in 2.5.10
CVSS
n/a
Published
2016-05-02
Title
bbPress <= 2.5.8 - Stored Cross-Site Scripting (XSS)
Fixed in
Fixed in 2.5.9
CVSS
n/a
Published
2014-08-01
Title
bbPress - forum.php page Parameter SQL Injection
Fixed in
Fixed in 2.0
CVSS
n/a
Published
2014-08-01
Title
bbPress - Multiple Script Malformed Input Path Disclosure
Fixed in
Fixed in 2.0
CVSS
n/a