Buddyboss

    Dashboard / Vendors

    Products: 4
    Vulnerabilities: 16
    Known Exploited: 0
    3
    Critical Level Threats
    1
    High Level Threats
    12
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-56032

    WordPress Buddyboss Platform plugin <= 3.0.4 - PHP Object Injection vulnerability

    Last Modified: Jun 26, 2026
    Published: Jun 26, 2026

    CVE-2024-12767

    BuddyBoss platform < 2.7.60 - Private Comment Exposure via IDOR

    Last Modified: Nov 13, 2025
    Published: May 15, 2025

    CVE-2025-1909

    BuddyBoss Platform Pro <= 2.7.01 - Authentication Bypass via Apple OAuth provider

    Last Modified: Apr 21, 2026
    Published: May 05, 2025

    CVE-2024-13859

    BuddyBoss Platform <= 2.8.50 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'bp_nouveau_ajax_media_save' function

    Last Modified: Apr 08, 2026
    Published: May 02, 2025

    CVE-2024-13860

    BuddyBoss Platform <= 2.8.50 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'bbp_topic_title'

    Last Modified: Apr 08, 2026
    Published: May 02, 2025
    Items Per Page