Plugin icon

BP Profile Search

bp-profile-search

Vulnerabilities:

4

Last Updated:

October 10, 2026

Active Installs:

5000

Published
Title
Fixed in
CVSS
Published
2026-10-13
Title
BP Profile Search < 6.0 - Unauthenticated Local File Inclusion to Remote Code Execution via 'bps_directory' Cookie 'ajax_template' Value
Fixed in
Fixed in 6.0
CVSS
8.1 (high)
Published
2024-08-19
Title
BP Profile Search < 5.8 - Cross-Site Request Forgery to Reflected Cross-Site Scripting
Fixed in
Fixed in 5.8
CVSS
6.1 (medium)
Published
2024-01-17
Title
BP Profile Search < 5.6 - Reflected Cross-Site Scripting via BPS_FORM
Fixed in
Fixed in 5.6
CVSS
6.1 (medium)
Published
2016-12-09
Title
BP Profile Search < 4.6 - PHP Object Injection
Fixed in
Fixed in 4.6
CVSS
n/a