CVE-2024-11913

The Activity Plus Reloaded for BuddyPress plugin for WordPress is vulnerable to Blind Server-Side Request Forgery in all versions up to, and including, 1.1.1 via the 'ajaxpreviewlink' function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to make web...

PT-2025-1712

Name of the Vulnerable Software and Affected Versions Activity Plus Reloaded for BuddyPress plugin for WordPress versions 1.1.1 and earlier Description The issue allows authenticated attackers with Subscriber-level access and above to make web requests to arbitrary locations originating from the...