EUVD-2022-3456

Malicious code in bioql PyPI...

EUVD-2024-49791

Malicious code in bioql PyPI...

CVE-2024-9207

The BuddyPress Docs plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of removequeryarg without appropriate escaping on the URL in all versions up to, and including, 2.2.3. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in...

PT-2024-39490

Name of the Vulnerable Software and Affected Versions BuddyPress Docs plugin for WordPress versions up to, and including, 2.2.3 Description The issue is related to Reflected Cross-Site Scripting due to the use of remove query arg without appropriate escaping on the URL. This allows unauthenticate...

CVE-2017-6954

Vulnerability in BuddyPress Docs WordPress plugin (pre-1.9.3) in includes/component.php allows authenticated users to edit other users’ documents due to improper authorization. Impact is unauthorized edits of documents; CVSS base scores (4.0–4.3) indicate MEDIUM severity. Remediation: upgrade to ...

PT-2017-17421

Name of the Vulnerable Software and Affected Versions BuddyPress Docs plugin versions prior to 1.9.3 Description The issue allows authenticated users to edit documents of other users without proper permissions. This is due to a problem in the includes/component.php file of the BuddyPress Docs...