Plugin icon

Buddyboss Platform

buddyboss-platform

Vulnerabilities:

7

Last Updated:

April 4, 2026

Active Installs:

n/a

Published
Title
Fixed in
CVSS
Published
2025-05-01
Title
BuddyBoss Platform and BuddyBoss Theme <= Multiple Versions - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'invitee_name'
Fixed in
Fixed in 2.8.51
CVSS
6.4 (medium)
Published
2025-05-01
Title
BuddyBoss Platform < 2.8.51 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'bp_nouveau_ajax_media_save' function
Fixed in
Fixed in 2.8.51
CVSS
6.4 (medium)
Published
2025-05-01
Title
BuddyBoss Platform < 2.8.51 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'bbp_topic_title'
Fixed in
Fixed in 2.8.51
CVSS
6.4 (medium)
Published
2025-02-26
Title
BuddyBoss Platform < 2.8.00 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'link_title'
Fixed in
Fixed in 2.8.00
CVSS
6.4 (medium)
Published
2024-05-14
Title
BuddyBoss Platform < 2.6.0 - Insecure Direct Object Reference on Like Comment
Fixed in
Fixed in 2.6.0
CVSS
4.3 (medium)
Published
2024-04-22
Title
BuddyBoss platform < 2.7.60 - Private Comment Exposure via IDOR
Fixed in
Fixed in 2.7.60
CVSS
4.3 (medium)
Published
2021-09-16
Title
Buddyboss Platform < 1.7.9 - Subscriber+ SQL Injection
Fixed in
Fixed in 1.7.9
CVSS
6.5 (medium)