CVE-2025-58002 WordPress GD bbPress Tools Plugin <= 3.5.3 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Milan Petrovic GD bbPress Tools gd-bbpress-tools allows DOM-Based XSS.This issue affects GD bbPress Tools: from n/a through = 3.5.3...

CVE-2025-58002

CVE-2025-58002 affects GD bbPress Tools for WordPress (WordPress plugin). The issue is DOM-based XSS caused by improper input neutralization during web page generation, enabling cross-site scripting. Affected versions are from n/a up to 3.5.3. The CVSSv3.1 base score is 6.5 (Medium) with network ...

PT-2025-38852

Name of the Vulnerable Software and Affected Versions GD bbPress Tools versions through 3.5.3 Description The software contains a flaw related to improper input handling during web page generation, leading to a potential Cross-site Scripting XSS issue. Specifically, the issue is a DOM-Based XSS...

WordPress plugin GD bbPress Tools 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripti...

WordPress bbPress Notify plugin <= 2.19.5 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin bbPress Notify versions = 2.19.5...

WordPress bbPress Move Topics plugin <= 1.1.6 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin bbPress Move Topics versions = 1.1.6...

WordPress bbpress Simple Advert Units Plugin <= 0.41 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin bbpress Simple Advert Units versions = 0.41...

CVE-2025-24763

Missing Authorization vulnerability in Pascal Casier bbPress API bbp-api allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects bbPress API: from n/a through = 1.0.14...

CVE-2025-24763

Missing Authorization vulnerability in Pascal Casier bbPress API bbp-api allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects bbPress API: from n/a through = 1.0.14...

CVE-2025-24763 WordPress bbPress API <= 1.0.14 - Broken Access Control Vulnerability

Missing Authorization vulnerability in Pascal Casier bbPress API allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects bbPress API: from n/a through 1.0.14...

CVE-2025-24763

CVE-2025-24763 is a Missing Authorization vulnerability in the bbPress API. Affected component: bbPress API (versions up to 1.0.14). Root cause: incorrectly configured access control security levels that allow unauthorized access to certain API actions. Public references in the initial document c...

CVE-2025-24763 WordPress bbPress API plugin <= 1.0.14 - Broken Access Control Vulnerability

Missing Authorization vulnerability in Pascal Casier bbPress API bbp-api allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects bbPress API: from n/a through = 1.0.14...

PT-2025-24113 · Unknown · Bbpress Api

Name of the Vulnerable Software and Affected Versions: bbPress API versions 1.0.0 through 1.0.14 Description: The issue is related to a Missing Authorization vulnerability in the Pascal Casier bbPress API, which allows exploiting incorrectly configured access control security levels...

WordPress plugin bbPress API 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

WordPress bbPress API plugin <= 1.0.14 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by ch4r0n in WordPress Plugin bbPress API versions = 1.0.14...

CVE-2023-34031

Cross-Site Request Forgery CSRF vulnerability in Pascal Casier bbPress Toolkit plugin = 1.0.12 versions...

CVE-2023-51668

Cross-Site Request Forgery CSRF vulnerability in WP Zone Inline Image Upload for BBPress.This issue affects Inline Image Upload for BBPress: from n/a through 1.1.18...

CVE-2023-34032

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Pascal Casier bbPress Toolkit plugin = 1.0.12 versions...

CVE-2023-24403

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in WP For The Win bbPress Voting plugin = 2.1.11.0 versions...

CVE-2023-41951

Missing Authorization vulnerability in rtCamp rtMedia for WordPress, BuddyPress and bbPress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects rtMedia for WordPress, BuddyPress and bbPress: from n/a through 4.6.14...