75 matches found
WordPress Push Notification for Post and BuddyPress plugin <= 2.07 - Reflected Cross-Site Scripting vulnerability
Reflected Cross-Site Scripting vulnerability discovered by vgo0 in WordPress Plugin Push Notification for Post and BuddyPress versions = 2.07...
CVE-2025-12391
The Restrictions for BuddyPress plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the handleoptinoptout function in all versions up to, and including, 1.5.2. This makes it possible for unauthenticated attackers to opt in and out of tracki...
EUVD-2025-197958
The Restrictions for BuddyPress plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the handleoptinoptout function in all versions up to, and including, 1.5.2. This makes it possible for unauthenticated attackers to opt in and out of tracki...
CVE-2025-12391
The Restrictions for BuddyPress plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the handleoptinoptout function in all versions up to, and including, 1.5.2. This makes it possible for unauthenticated attackers to opt in and out of tracki...
CVE-2025-12391 Restrictions for BuddyPress <= 1.5.2 - Missing Authorization to Unauthenticated Tracking Status Update
The Restrictions for BuddyPress plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the handleoptinoptout function in all versions up to, and including, 1.5.2. This makes it possible for unauthenticated attackers to opt in and out of tracki...
WordPress Restrictions for BuddyPress plugin <= 1.5.2 - Missing Authorization to Unauthenticated Tracking Status Update vulnerability
Missing Authorization to Unauthenticated Tracking Status Update vulnerability discovered by Legion Hunter in WordPress Plugin Restrictions for BuddyPress versions = 1.5.2...
WordPress Buddypress Plugin Missing Authorization Vulnerability
WordPress Buddypress Plugin is an open source social networking plugin developed by Automattic the parent company of WordPress for converting WordPress websites into fully functional social platforms. WordPress Buddypress Plugin suffers from a lack of authorization vulnerability, no details of th...
EUVD-2013-4788
Malware in sbrugna...
EUVD-2014-1950
Malware in sbrugna...
EUVD-2015-9295
Malware in sbrugna...
EUVD-2012-2112
Malware in sbrugna...
EUVD-2025-12119
Malicious code in bioql PyPI...
EUVD-2022-47995
Malicious code in bioql PyPI...
EUVD-2024-44460
Malicious code in bioql PyPI...
EUVD-2024-26995
Malicious code in bioql PyPI...
EUVD-2024-16749
Malicious code in bioql PyPI...
WordPress BuddyPress XProfile Custom Image Field Plugin <= 3.0.1 - Arbitrary File Deletion Vulnerability
Arbitrary File Deletion Vulnerability discovered by Martino Spagnuolo r3verii in WordPress Plugin BuddyPress XProfile Custom Image Field versions = 3.0.1...
WordPress plugin Activity Plus Reloaded for BuddyPress 安全漏洞
WordPress Activity Plus Reloaded for BuddyPress plugin is an extension plugin that provides additional functionality to the BuddyPress community plugin. WordPress Activity Plus Reloaded for BuddyPress plugin suffers from an authorization issue vulnerability that stems from a lack of authorization...
CVE-2024-3974
The BuddyPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘username’ parameter in versions up to, and including, 12.4.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level permissions...
CVE-2024-4892
The BuddyPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘displayname’ parameter in versions up to, and including, 12.4.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level permissio...