930 matches found
CVE-2026-124965
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in rtCamp Inc. rtMedia for WordPress, BuddyPress and bbPress buddypress-media allows Stored XSS.This issue affects rtMedia for WordPress, BuddyPress and bbPress: from n/a through 4.7.16...
EUVD-2026-125427
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in rtCamp Inc. rtMedia for WordPress, BuddyPress and bbPress buddypress-media allows Stored XSS.This issue affects rtMedia for WordPress, BuddyPress and bbPress: from n/a through 4.7.16...
CVE-2026-124965 WordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.7.16 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in rtCamp Inc. rtMedia for WordPress, BuddyPress and bbPress buddypress-media allows Stored XSS.This issue affects rtMedia for WordPress, BuddyPress and bbPress: from n/a through 4.7.16...
CVE-2026-124965
The rtMedia for WordPress, BuddyPress and bbPress plugin (buddypress-media) by rtCamp Inc. is vulnerable to Stored Cross-site Scripting (XSS) . This issue arises from the improper neutralization of input during web page generation. The vulnerability impacts versions from the earliest release thro...
BuddyPress REST API <7.2.1 - Privilege Escalation/Remote Code Execution
WordPress BuddyPress before version 7.2.1 is susceptible to a privilege escalation vulnerability that can be leveraged to perform remote code execution. id: CVE-2021-21389 info: name: BuddyPress REST API 7.2.1 - Privilege Escalation/Remote Code Execution author: lotusdll severity: high descriptio...
CVE-2021-21389
CVE-2021-21389 BuddyPress 7.2.1 - REST API Privilege Escalation to RCE PoC Full Affected version: 5.0.0 to 7.2.0 User requirement: Subscriber user Method: Privilege Escalation to Administrator and trigger RCE via REST API Endpoint: /v1/members/me endpoint. How to use Docker git clone...
CVE-2025-31033
⚠️ CVE-2025-31033 - CSRF in WordPress Buddypress Humanity Plugin Exploit – CVE-2025-31033 form action="http://target.com/wp-admin/admin.php?page=bph-settings" me...
WordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.7.16 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by AndrewN in WordPress Plugin rtMedia for WordPress, BuddyPress and bbPress versions = 4.7.16...
CVE-2021-21389
Usage 1. Build the vulnerable WordPress and BuddyPress environment using Docker. 2. Build and run the mariaDB container. 3. Ensure the two containers run on the same network. ex docker network create wordpressnetwork docker network connect wordpressnetwork wordpressapp docker network connect...
WordPress BuddyPress XProfile Custom Image Field plugin <= 3.1.0 - Unauthenticated Arbitrary File Deletion vulnerability
Unauthenticated Arbitrary File Deletion vulnerability discovered by jun2e0 in WordPress Plugin BuddyPress XProfile Custom Image Field versions = 3.1.0...
CVE-2026-120518
The BuddyPress XProfile Image Field plugin for WordPress is vulnerable to arbitrary file deletion in all versions up to, and including, 3.1.0. This is due to bpxpimagefieldupdateonuseractivation calling unlink on a path built from visitor-supplied signup metadata with no realpath resolution, no...
CVE-2026-120518 BuddyPress XProfile Image Field <= 3.1.0 - Unauthenticated Arbitrary File Deletion via Signup Image Field Activation Handler
The BuddyPress XProfile Image Field plugin for WordPress is vulnerable to arbitrary file deletion in all versions up to, and including, 3.1.0. This is due to bpxpimagefieldupdateonuseractivation calling unlink on a path built from visitor-supplied signup metadata with no realpath resolution, no...
CVE-2026-120518
The BuddyPress XProfile Image Field plugin for WordPress is vulnerable to arbitrary file deletion in all versions up to and including 3.1.0 . The vulnerability exists because the bpxp_image_field_update_on_user_activation() function calls unlink() on a path constructed from visitor-supplied signu...
EUVD-2026-115659
The BuddyPress XProfile Image Field plugin for WordPress is vulnerable to arbitrary file deletion in all versions up to, and including, 3.1.0. This is due to bpxpimagefieldupdateonuseractivation calling unlink on a path built from visitor-supplied signup metadata with no realpath resolution, no...
PT-2026-136004
Name of the Vulnerable Software and Affected Versions BuddyPress XProfile Image Field versions prior to 3.1.1 Description Unauthenticated attackers can delete arbitrary files on the server by submitting a zero-byte file via the field N hidden parameter during the registration process. This occurs...
WordPress BuddyPress 14.5.2 Blind SQL Injection
WordPress BuddyPress version 14.5.2 and earlier contain a blind SQL injection vulnerability. The supplied proof of concept authenticates as a Subscriber, writes a crafted profile visibility field identifier, and measures or reports resulting database-query evidence...
CVE-2026-116868
Subscriber PHP Object Injection in BuddyPress Xprofile Custom Field Types = 1.3.1 versions...
CVE-2026-116868 WordPress BuddyPress Xprofile Custom Field Types plugin <= 1.3.1 - PHP Object Injection vulnerability
Subscriber PHP Object Injection in BuddyPress Xprofile Custom Field Types = 1.3.1 versions...