WordPress Plugin Vulnerabilities

Buddypress <= 1.9.1 - Stored Cross-Site Scripting (XSS)

Description

The BuddyPress WordPress plugin was affected by a Stored Cross-Site Scripting (XSS) security vulnerability.

Affects Plugins

Plugin icon
buddypress
Fixed in 1.9.2

References

CVE
CVE-2014-1888
URL
https://packetstormsecurity.com/files/#125212/

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Verified
No
WPVDB ID
298ece27-8554-43f4-b263-ecaa2fd2f2d9

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2022-01-27
Title
WHMCS Bridge < 6.4b - Reflected Cross-Site Scripting (XSS)
Published
2021-12-08
Title
Fathom Analytics < 3.0.5 - Admin+ Stored Cross-Site Scripting
Published
2024-10-18
Title
Registrations for The Events Calendar < 2.12.4 - Unauthenticated Stored XSS
Published
2026-03-06
Title
Hammas Calendar < 1.5.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'apix' Shortcode Attribute
Published
2026-01-08
Title
Autogen Headers Menu <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'head_class' Shortcode Parameter