Buddypress

    Dashboard / Vendors

    Products: 1
    Vulnerabilities: 25
    Known Exploited: 0
    0
    Critical Level Threats
    12
    High Level Threats
    12
    Medium Level Threats
    1
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2024-12145

    BuddyPress <= 14.3.3 - Insecure Direct Object Reference to Notifications Deletion

    Last Modified: Sep 11, 2026
    Published: Sep 11, 2026

    CVE-2026-8155

    BuddyPress < 14.5.0 - Subscriber+ Private Messages Disclosure via IDOR

    Last Modified: Aug 04, 2026
    Published: Jul 31, 2026

    CVE-2026-1360

    BuddyPress <= 14.5.0 - Authenticated (Subscriber+) PHP Object Injection via XProfile Field Data

    Last Modified: Jul 30, 2026
    Published: Jul 30, 2026

    CVE-2026-53675

    BuddyPress 14.4.0 Friends List IDOR via REST API

    Last Modified: Jun 10, 2026
    Published: Jun 09, 2026

    CVE-2026-53674

    BuddyPress 14.4.0 REGEXP Injection via @Mention Username Resolution

    Last Modified: Jun 10, 2026
    Published: Jun 09, 2026
    Items Per Page
    Buddypress Vulnerabilities & Security CVEs | CVE-DB