CVE-2024-2961

Buddyforms 2.7.7 CNEXT RCE Abusing CVE-2024-2961 and CVE-2023–26326 to RCE Usage git-clone https://github.com/suce0155/CVE-2024-2961buddyforms2.7.7 pip install -r requirements.txt python3 buddyforms2.7.7cnextexploit.py http://site/wp-admin/admin-ajax.php ip port Analysis and Technical Details Che...

exploit_cve-2023-26326_using_cve-2024-2961

Exploit BuddyForms CVE-2023-26326 using Iconv CVE-2024-2961 This work was done by me, Omar Elshopky, and Nour El Dien Bassiouny. This repository contains an exploit for the WordPress BuddyForms Plugin CVE-2023-26326, initially reported in the advisory by Joshua Martinelle. The exploit leverages a...

CVE-2026-107622

The BuddyForms plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.10.5 via a form-type confusion attack through the bfposttype parameter. This is due to the public frontend submission handler buddyformsformresponsenoajax authorizing logged-out...

CVE-2026-107658

The BuddyForms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'bfposttype and buddyformsformcontent' parameter in all versions up to, and including, 2.10.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers t...

CVE-2026-107658 BuddyForms <= 2.10.5 - Unauthenticated Stored Cross-Site Scripting via 'bf_post_type' Parameter via Post-Type Confusion

The BuddyForms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'bfposttype and buddyformsformcontent' parameter in all versions up to, and including, 2.10.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers t...

EUVD-2026-118198

The BuddyForms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'bfposttype and buddyformsformcontent' parameter in all versions up to, and including, 2.10.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers t...

CVE-2026-107658

The BuddyForms plugin for WordPress (versions

CVE-2026-107658 BuddyForms <= 2.10.5 - Unauthenticated Stored Cross-Site Scripting via 'bf_post_type' Parameter via Post-Type Confusion

The BuddyForms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'bfposttype and buddyformsformcontent' parameter in all versions up to, and including, 2.10.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers t...

CVE-2026-107622 BuddyForms <= 2.10.5 - Unauthenticated Privilege Escalation to Form-Type Confusion via 'bf_post_type' Parameter

The BuddyForms plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.10.5 via a form-type confusion attack through the bfposttype parameter. This is due to the public frontend submission handler buddyformsformresponsenoajax authorizing logged-out...

EUVD-2026-118190

The BuddyForms plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.10.5 via a form-type confusion attack through the bfposttype parameter. This is due to the public frontend submission handler buddyformsformresponsenoajax authorizing logged-out...

CVE-2026-107622 BuddyForms <= 2.10.5 - Unauthenticated Privilege Escalation to Form-Type Confusion via 'bf_post_type' Parameter

The BuddyForms plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.10.5 via a form-type confusion attack through the bfposttype parameter. This is due to the public frontend submission handler buddyformsformresponsenoajax authorizing logged-out...

CVE-2026-107622

The BuddyForms plugin for WordPress is vulnerable to Privilege Escalation in all versions up to and including 2.10.5 . The vulnerability stems from a form-type confusion attack via the bf_post_type parameter. The frontend submission handler buddyforms_form_response_no_ajax() fails to properly val...

WordPress BuddyForms plugin <= 2.10.5 - Unauthenticated Stored Cross-Site Scripting vulnerability

Unauthenticated Stored Cross-Site Scripting vulnerability discovered by Matthew Lapinski in WordPress Plugin BuddyForms versions = 2.10.5...

WordPress BuddyForms plugin <= 2.10.5 - Unauthenticated Privilege Escalation to Form-Type Confusion vulnerability

Unauthenticated Privilege Escalation to Form-Type Confusion vulnerability discovered by Supakiad S. m3ez in WordPress Plugin BuddyForms versions = 2.10.5...

CVE-2026-107658: themekraft BuddyForms: The BuddyForms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'bf_post_type (and…

The BuddyForms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'bfposttype and buddyformsformcontent' parameter in all versions up to, and including, 2.10.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers t...

PT-2026-137990

Name of the Vulnerable Software and Affected Versions BuddyForms versions prior to 2.10.6 Description An issue exists where unauthenticated attackers can achieve privilege escalation and full site takeover. This occurs via a form-type confusion attack using the bf post type parameter. The public...

CVE-2026-107622: themekraft BuddyForms: The BuddyForms plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.10.5…

The BuddyForms plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.10.5 via a form-type confusion attack through the bfposttype parameter. This is due to the public frontend submission handler buddyformsformresponsenoajax authorizing logged-out...

WordPress BuddyForms plugin 2.8.8-2.10.0 - Unauthenticated Guest Attachment Deletion vulnerability

Unauthenticated Guest Attachment Deletion vulnerability discovered by Muni Nitish Kumar Yaddala in WordPress Plugin BuddyForms versions 2.8.8-2.10.0...

CVE-2026-118437

The BuddyForms WordPress plugin before 2.10.1 does not properly verify ownership before deleting guest-uploaded attachments, allowing unauthenticated attackers to permanently delete media files uploaded by other unauthenticated visitors...

CVE-2026-118437

The BuddyForms WordPress plugin (versions 2.8.8 through 2.10.0 ) is vulnerable to an unauthenticated guest attachment deletion flaw. The root cause is a failure to properly verify ownership before deleting attachments uploaded by guests. This allows unauthenticated attackers to permanently delete...