Plugin icon

Block, Suspend, Report for BuddyPress

bp-toolkit

Vulnerabilities:

3

Last Updated:

May 5, 2026

Active Installs:

600

Published
Title
Fixed in
CVSS
Published
2026-07-08
Title
Block, Suspend, Report for BuddyPress < 3.6.5 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'link' Parameter
Fixed in
Fixed in 3.6.5
CVSS
6.4 (medium)
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Fixed in
Fixed in 3.6.1
CVSS
6.1 (medium)
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Fixed in
Fixed in 3.3.3
CVSS
4.3 (medium)