WordPress Plugin Vulnerabilities

BuddyPress <= 2.3.4 - Authenticated Privilege Escalation

Description

According to the vendor, versions 2.0.4, 2.1.2, and 2.2.4 also contain a fix for this vulnerability.

Affects Plugins

Plugin icon
buddypress
Fixed in 2.3.5

References

URL
https://buddypress.org/2015/11/buddypress-2-3-5/

Miscellaneous

Submitter
ethicalhack3r
Submitter twitter
ethicalhack3r
Verified
No
WPVDB ID
55e3484e-6b92-451f-8dc0-fe7544497a1a

Timeline

Publicly Published
2015-11-11 (about 10 years ago)
Added
2015-11-12 (about 10 years ago)
Last Updated
2019-10-31 (about 6 years ago)

Other

Published
Title
Published
2021-04-21
Title
iThemes Security Free (< 7.9.1) & Pro (< 6.8.4) - Hide Backend Bypass
Published
2022-12-27
Title
FluentAuth < 1.0.2 - Bypass blocks by IP Spoofing
Published
2016-02-08
Title
WooCommerce - Store Toolkit Plugin <= 1.5.6 - Privilege Escalation
Published
2015-07-18
Title
WordPress Mobile Pack <= 2.1.2 - Information Disclosure
Published
2026-02-17
Title
Passster < 4.2.24 - Password Protection Bypass