CVE-2026-107622 BuddyForms <= 2.10.5 - Unauthenticated Privilege Escalation to Form-Type Confusion via 'bf_post_type' Parameter

The BuddyForms plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.10.5 via a form-type confusion attack through the bfposttype parameter. This is due to the public frontend submission handler buddyformsformresponsenoajax authorizing logged-out...

CVE-2026-107622

The BuddyForms plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.10.5 via a form-type confusion attack through the bfposttype parameter. This is due to the public frontend submission handler buddyformsformresponsenoajax authorizing logged-out...