WordPress Plugin Vulnerabilities

BuddyPress 1.7.1 - Multiple SQL Injections

Description

The BuddyPress WordPress plugin was affected by a Multiple SQL Injections security vulnerability.

Affects Plugins

Plugin icon
buddypress
Fixed in 1.7.2

Classification

Type
SQLI
OWASP top 10
A1: Injection
CWE
CWE-89

Miscellaneous

Verified
No
WPVDB ID
267545af-0b8f-4077-9700-398f24d19f34

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2015-05-15 (about 10 years ago)

Other

Published
Title
Published
2022-02-16
Title
WP Statistics < 13.1.6 - Unauthenticated Blind SQL Injection via current_page_type
Published
2022-12-09
Title
WP RSS By Publishers <= 0.1 - Admin+ SQLi
Published
2025-12-22
Title
BWL Pro Voting Manager <= 1.4.9 - Authenticated (Contributor+) SQL Injection
Published
2024-12-02
Title
WP Project Manager <= 2.6.26 - Project Manager+ SQL Injection
Published
2025-01-24
Title
Simple Download Monitor < 3.9.26 - Authenticated (Administrator+) SQL Injection