WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
buddypress
Published
2021-03-17
Title
BuddyPress < 7.2.1 - Force a Friendship
Slug
buddypress
Published
2021-03-17
Title
BuddyPress < 7.2.1 - Read Private Messages
Slug
buddypress
Published
2021-03-17
Title
BuddyPress < 7.2.1 - Manage BuddyPress Member Types
Slug
buddypress
Published
2021-03-17
Title
BuddyPress < 7.2.1 - Invite Member to Join Group
Slug
buddypress
Published
2021-08-18
Title
BuddyPress < 9.1.1 - Activation Key Disclosure
Slug
buddypress
Published
2021-08-18
Title
BuddyPress < 9.1.1 - SQL Injections
Slug
buddypress
Published
2021-04-14
Title
BuddyPress < 7.3.0 - Multiple Authenticated REST API Vulnerabilities
Slug
buddypress
Published
2023-12-26
Title
BuddyPress < 11.3.2 - Contributor+ Stored XSS
Slug
buddypress
Published
2024-05-03
Title
BuddyPress < 12.4.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
buddypress
Published
2024-06-11
Title
BuddyPress < 12.5.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
buddypress
Published
2024-10-24
Title
BuddyPress < 14.2.1 - Authenticated (Subscriber+) Directory Traversal
Slug
buddypress
Published
2025-09-27
Title
BuddyPress < 14.4.0 - Missing Authorization
Slug
buddypress
Published
2026-01-22
Title
BuddyPress < 14.3.4 - Unauthenticated Arbitrary Shortcode Execution
Slug
buddypress-activity-plus
Published
2015-07-14
Title
BuddyPress Activity Plus < 1.6.2 - Cross-Site Request Forgery (CSRF)
Slug
buddypress-check-ins-pro
Published
2022-04-11
Title
Wbcom Designs Plugins - Subscriber+ Arbitrary Plugin Installation, Activation and Deactivation
Slug
buddypress-component-stats
Published
2020-03-24
Title
Multiple plugins - Unauthenticated Dompdf Local File Inclusion (LFI)
Slug
buddypress-docs
Published
2017-03-17
Title
BuddyPress Docs <= 1.9.2 - Authenticated Lack of Authorisation
Slug
buddypress-docs
Published
2024-10-07
Title
BuddyPress Docs < 2.2.4 - Reflected Cross-Site Scripting
Slug
buddypress-docs
Published
2025-06-06
Title
BuddyPress Docs < 2.2.5 - Subscriber+ Arbitrary Document Read/Update
Slug
buddypress-extended-friendship-request
Published
2014-08-01
Title
BuddyPress Extended Friendship Request - wp-admin/admin-ajax.php friendship_request_message Parameter XSS
Slug
buddypress-giphy
Published
2022-04-11
Title
Wbcom Designs Plugins - Subscriber+ Arbitrary Plugin Installation, Activation and Deactivation
Slug
buddypress-global-search
Published
2023-10-12
Title
BuddyPress Global Search <= 1.2.1 - Admin+ Stored XSS
Slug
buddypress-hashtags
Published
2022-04-11
Title
Wbcom Designs Plugins - Subscriber+ Arbitrary Plugin Installation, Activation and Deactivation
Slug
buddypress-humanity
Published
2025-04-09
Title
Buddypress Humanity <= 1.2 - Cross-Site Request Forgery to Privilege Escalation
Slug
buddypress-media
Published
2015-04-28
Title
rtMedia for WordPress, BuddyPress & bbPress 3.7.39 - SQL Injection