WordPress Plugin Vulnerabilities

BuddyPress < 5.1.1 - Denial of Service

Description

A denied of service was fixed that could allow a logged in user to remove another user’s avatar and also any empty folder.

Affects Plugins

Plugin icon
buddypress
Fixed in 5.1.1

References

URL
https://buddypress.org/2019/12/buddypress-5-1-1/

Miscellaneous

Original Researcher
nomnom
Verified
No
WPVDB ID
4ba45acd-4035-403b-8045-523e3e2b97b9

Timeline

Publicly Published
2019-12-23 (about 6 years ago)
Added
2020-03-02 (about 6 years ago)
Last Updated
2020-03-03 (about 6 years ago)

Other

Published
Title
Published
2025-03-27
Title
Klarna Checkout for WooCommerce < 2.13.5 - DoS via Excessive Logging
Published
2016-08-20
Title
WordPress 4.5.3 - Authenticated Denial of Service (DoS)
Published
2019-11-05
Title
Safe SVG <= 1.9.4 - Denial of Service
Published
2024-02-08
Title
Backuply - Backup, Restore, Migrate and Clone < 1.2.6 - Unauthenticated Denial of Service
Published
2014-11-20
Title
WordPress <= 4.0 - Long Password Denial of Service (DoS)