WordPress Plugin Vulnerabilities | Page 57 | WPScan

0-9
a
b
c
d
e
f
g
h
i
j
k
l
m
n
o
p
q
r
s
t
u
v
w
x
y
z

Slug

buddyforms-woocommerce-form-elements

Published

2023-07-18

Title

Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting

Slug

Published

2023-10-16

Title

BuddyMeet < 2.3.0 - Contributor+ Stored XSS

Slug

Published

2014-08-01

Title

Buddypress <= 1.9.1 - Crafted bp_new_group_id Cookie Arbitrary Group Manipulation

Slug

Published

2014-08-01

Title

Buddypress <= 1.9.1 - Stored Cross-Site Scripting (XSS)

Slug

Published

2014-08-01

Title

BuddyPress 1.7.1 - Multiple SQL Injections

Slug

Published

2012-03-31

Title

Buddypress <= 1.5.4 - SQL Injection

Slug

Published

2014-08-01

Title

BuddyPress 1.2.9 - SQL Injection

Slug

Published

2015-11-11

Title

BuddyPress <= 2.3.4 - Authenticated Privilege Escalation

Slug

Published

2016-12-23

Title

BuddyPress 2.0-2.7.3 - Arbitrary File Deletion

Slug

Published

2020-01-03

Title

BuddyPress 5.0.0-5.1.1 - Private Data Exposure via REST API

Slug

Published

2019-12-23

Title

BuddyPress < 5.1.1 - Denial of Service

Slug

Published

2020-11-28

Title

BuddyPress < 6.4.0 - Lack of Capability Check on Profile Page

Slug

Published

2021-03-17

Title

BuddyPress < 7.2.1 - REST API Privilege Escalation

Slug

Published

2021-03-17

Title

BuddyPress < 7.2.1 - Force a Friendship

Slug

Published

2021-03-17

Title

BuddyPress < 7.2.1 - Read Private Messages

Slug

Published

2021-03-17

Title

BuddyPress < 7.2.1 - Manage BuddyPress Member Types

Slug

Published

2021-03-17

Title

BuddyPress < 7.2.1 - Invite Member to Join Group

Slug

Published

2021-08-18

Title

BuddyPress < 9.1.1 - Activation Key Disclosure

Slug

Published

2021-08-18

Title

BuddyPress < 9.1.1 - SQL Injections

Slug

Published

2021-04-14

Title

BuddyPress < 7.3.0 - Multiple Authenticated REST API Vulnerabilities

Slug

Published

2023-12-26

Title

BuddyPress < 11.3.2 - Contributor+ Stored XSS

Slug

Published

2024-05-03

Title

BuddyPress < 12.4.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting

Slug

Published

2024-06-11

Title

BuddyPress < 12.5.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting

Slug

Published

2024-10-24

Title

BuddyPress < 14.2.1 - Authenticated (Subscriber+) Directory Traversal

Slug

Published

2025-09-27

Title

BuddyPress < 14.4.0 - Missing Authorization