WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
buddyforms
Published
2026-10-29
Title
BuddyForms 2.8.8 - 2.10.0 - Unauthenticated Guest Attachment Deletion
Slug
buddyforms-acf
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
buddyforms-anonymous-author
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
buddyforms-attach-posts-to-groups-extension
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
buddyforms-easypin
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
buddyforms-easypin
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
buddyforms-easypin
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
buddyforms-hierarchical-posts
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
buddyforms-hook-fields
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
buddyforms-members
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
buddyforms-posts-to-posts-integration
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
buddyforms-remote
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
buddyforms-review
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
buddyforms-ultimate-member
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
buddyforms-woocommerce-form-elements
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
buddymeet
Published
2023-10-16
Title
BuddyMeet < 2.3.0 - Contributor+ Stored XSS
Slug
buddypress
Published
2014-08-01
Title
Buddypress <= 1.9.1 - Crafted bp_new_group_id Cookie Arbitrary Group Manipulation
Slug
buddypress
Published
2014-08-01
Title
Buddypress <= 1.9.1 - Stored Cross-Site Scripting (XSS)
Slug
buddypress
Published
2014-08-01
Title
BuddyPress 1.7.1 - Multiple SQL Injections
Slug
buddypress
Published
2012-03-31
Title
Buddypress <= 1.5.4 - SQL Injection
Slug
buddypress
Published
2014-08-01
Title
BuddyPress 1.2.9 - SQL Injection
Slug
buddypress
Published
2015-11-11
Title
BuddyPress <= 2.3.4 - Authenticated Privilege Escalation
Slug
buddypress
Published
2016-12-23
Title
BuddyPress 2.0-2.7.3 - Arbitrary File Deletion
Slug
buddypress
Published
2020-01-03
Title
BuddyPress 5.0.0-5.1.1 - Private Data Exposure via REST API
Slug
buddypress
Published
2019-12-23
Title
BuddyPress < 5.1.1 - Denial of Service