WordPress Plugin Vulnerabilities

Buddypress <= 1.9.1 - Crafted bp_new_group_id Cookie Arbitrary Group Manipulation

Description

The BuddyPress WordPress plugin was affected by a Crafted bp_new_group_id Cookie Arbitrary Group Manipulation security vulnerability.

Affects Plugins

Plugin icon
buddypress
Fixed in 1.9.2

References

CVE
CVE-2014-1889
Exploitdb
31571
URL
https://packetstormsecurity.com/files/#125213/

Miscellaneous

Verified
No
WPVDB ID
6685cff6-b7af-44ea-840c-c08b2378847a

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2014-08-01
Title
Count Per Day <= 3.1 - download.php f Parameter Traversal Arbitrary File Access
Published
2014-08-01
Title
dt-chocolate - Image Open redirect
Published
2014-08-01
Title
Social Media Widget < 4.0.2 - Malicious Code
Published
2020-02-26
Title
Export Users to CSV <= 1.4.2 - CSV Injection
Published
2014-08-01
Title
SCv1 - download.php file Parameter Traversal Remote File Access