WordPress Plugin Vulnerabilities

BuddyPress Docs <= 1.9.2 - Authenticated Lack of Authorisation

Description

The BuddyPress Docs WordPress plugin was affected by an Authenticated Lack of Authorisation security vulnerability.

Affects Plugins

Plugin icon
buddypress-docs
Fixed in 1.9.3

References

CVE
CVE-2017-6954
URL
https://github.com/boonebgorges/buddypress-docs/commit/75293ed4e5f31f04e54689bfe2c647e3e3f5e1a9

Miscellaneous

Submitter
ethicalhack3r
Submitter twitter
ethicalhack3r
Verified
No
WPVDB ID
258d3673-3fa9-4b9c-a18e-c65ce2edd8fe

Timeline

Publicly Published
2017-03-17 (about 9 years ago)
Added
2017-03-20 (about 9 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2015-04-09
Title
WP REST API (WP API) <= 1.2 - Post Revision Disclosure
Published
2022-08-29
Title
Site Offline < 1.5.3 - Access Bypass
Published
2022-05-30
Title
WP-Email < 2.69.0 - Anti-Spam Protection Bypass via IP Spoofing
Published
2019-04-10
Title
Yuzo Related Posts < 5.12.94 - Unauthenticated Call Any Action or Update Any Option
Published
2025-01-03
Title
reCaptcha by BestWebSoft < 1.79 - CAPTCHA Bypass