Design/Logic Flaw

bbPress through 1.0.2 has XSS in /bb-login.php url via the re parameter...

CVE-2011-1150

bbPress through 1.0.2 has XSS in /bb-login.php url via the re parameter...

CVE-2011-1150

bbPress 1.0.2 and earlier contains a Cross‑Site Scripting (XSS) vulnerability in the bb-login.php endpoint, exploitable through the re parameter. The issue is documented across multiple sources (e.g., CVE-2011-1150, Red Hat advisory, GHSA). The connected documents confirm the vulnerability type a...

WordPress bbPress Members Only plugin <= 1.2.1 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability found in WordPress bbPress Members Only plugin versions = 1.2.1. Solution Update the WordPress bbPress Members Only plugin to the latest available version at least 1.3.1...

WordPress bbPress Login Register Links On Forum Topic Pages plugin <= 2.7.5 - Cross-Site Request Forgery (CSRF) to Stored Cross-Site Scripting (XSS) vulnerability

CSRF to Stored XSS vulnerability found in WordPress bbPress Login Register Links On Forum Topic Pages plugin versions = 2.7.5. Solution Update the WordPress bbPress Login Register Links On Forum Topic Pages plugin to the latest available version at least 2.8.5...

bbPress Members Only <= 1.2.1 - CSRF on Optional Settings page

The plugin does not prevent Cross-Site Request Forgery attacks on its 'Optional Settings' page...

bbPress Members Only <= 1.2.1 - CSRF on Optional Settings page

The plugin does not prevent Cross-Site Request Forgery attacks on its 'Optional Settings' page. PoC...

WordPress bbPress Members Only Plugin Cross Site Request Forgery Vulnerability

Description The 'bbPress Members Only' Plugin for WordPress is prone to a cross-site request-forgery vulnerability. An attacker can exploit this issue to perform certain unauthorized actions and gain access to the affected application. Other attacks are also possible. The 'bbPress Members Only'...

bbPress Login Register Links On Forum Topic Pages <= 2.7.5 - CSRF to Stored XSS

Lack of CSRF checks in the plugin's settings allow arbitrary change of the settings, which can also lead to stored XSS issues. PoC The payload below will result in a stored XSS in the 'Style Customize' page...

bbPress Login Register Links On Forum Topic Pages <= 2.7.5 - CSRF to Stored XSS

Lack of CSRF checks in the plugin's settings allow arbitrary change of the settings, which can also lead to stored XSS issues. The payload below will result in a stored XSS in the 'Style Customize' page. " /...

CVE-2018-21006

The bbp-move-topics plugin before 1.1.6 for WordPress has CSRF...

WordPress GD bbPress Attachments plugin <=2.5 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability found by Luigi Gubello in WordPress GD bbPress Attachments plugin versions =2.5. Solution Update the WordPress GD bbPress Attachments plugin to the latest available version at least 2.6...

GD bbPress Attachments <= 2.5 - Authenticated Stored XSS

An authenticated user of a bbPress forum, who can attach a file, can inject arbitrary JavaScript code via the image filename. The arbitrary code runs both on the topic page and in the admin panel, and it only affects the administrators, moderators and the attacker. The variable $error‘file’ in...

Bbp Move Topics < 1.1.6 - Code Injection & CSRF

The bbPress Move Topics WordPress plugin was affected by a Code Injection & CSRF security vulnerability...

bbPress <= 2.5.12 - Unauthenticated SQL Injection

Requires anonymous posting option to be enabled and WordPress version 4.8.3...

Wordpress Image Upload for BBPress Plugin - Full Path Disclosure Vulnerability

Usage Info About Failure: The Full Path Disclosure vulnerability, when it occurs, exposes the full path of a particular file and the user on your server. These two information make life easier for an attacker. First he will know where the files are and his attempts will be directed. According to...

WordPress: WordPress DB Class, bad implementation of prepare method guides to sqli and information disclosure

Issue 1: Method checks if first argument is an array and if it is, it avoids the rest of the arguments and uses the first argument array values as input. Issue 2: When input query has %s in it, then it quote and this guides to sql injection in case query that need to be prepared have quoted user...

WordPress bbPress Plugin <= 2.5.9 - Cross Site Scripting

This plugin is prone to display name and avatar potential cross site scripting vulnerability. Solution Update plugin...

Automattic: [bbPress] Stored XSS in any forum post.

Intro: Encouraged by the success of cure53 and their reward, i start the research plugins in your scope. And almost immediately i found critical Stored XSS, which of course leeds to privelege escalation or PHP code execution. This vulnerability doesnt requres "special" preveleges like...

bbPress <= 2.5.9 - Display Name & Avatar Potential Cross-Site Scripting (XSS)

The bbPress WordPress plugin was affected by a Display Name & Avatar Potential Cross-Site Scripting XSS security vulnerability...