Plugin icon

BuddyPress Integration for WooCommerce

wc4bp

Vulnerabilities:

7

Last Updated:

October 7, 2026

Active Installs:

700

Published
Title
Fixed in
CVSS
Published
2025-02-28
Title
BuddyPress WooCommerce My Account Integration. Create WooCommerce Member Pages < 3.4.26 - Cross-Site Request Forgery to Limited Settings Update
Fixed in
Fixed in 3.4.26
CVSS
4.3 (medium)
Published
2025-02-28
Title
BuddyPress WooCommerce My Account Integration. Create WooCommerce Member Pages < 3.4.25 - Missing Authorization to Authenticated (Subscriber+) Limited Settings Update
Fixed in
Fixed in 3.4.25
CVSS
4.3 (medium)
Published
2024-06-06
Title
BuddyPress WooCommerce My Account Integration. Create WooCommerce Member Pages < 3.4.20 - Missing Authorization
Fixed in
Fixed in 3.4.20
CVSS
4.3 (medium)
Published
2024-03-22
Title
BuddyPress WooCommerce My Account Integration. Create WooCommerce Member Pages < 3.4.21 - Authenticated (Subscriber+) PHP Object Injection in get_simple_request
Fixed in
Fixed in 3.4.21
CVSS
8.8 (high)
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Fixed in
Fixed in 3.4.16
CVSS
6.1 (medium)
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Fixed in
Fixed in 3.4.2
CVSS
4.3 (medium)
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Fixed in
Fixed in 3.2.6
CVSS
9.9 (critical)