Known Vulnerabilities for products from BuddyPress
Listed below are 11 of the newest known vulnerabilities associated with the vendor "BuddyPress".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-53675 json | Not Provided | 2026-06-10 | 2026-06-09 | |
| CVE-2026-53674 json | Not Provided | 2026-06-10 | 2026-06-09 | |
| CVE-2026-53673 json | Not Provided | 2026-06-10 | 2026-06-09 | |
| CVE-2026-5144 json | Not Provided | 2026-04-11 | 2026-04-13 | |
| CVE-2025-62760 json | Not Provided | 2025-12-31 | 2026-04-23 | |
| CVE-2025-62022 json | Not Provided | 2025-10-22 | 2026-04-28 | |
| CVE-2025-58263 json | Not Provided | 2025-09-22 | 2026-04-23 | |
| CVE-2025-48158 json | Not Provided | 2025-08-20 | 2026-04-23 | |
| CVE-2025-47548 json | Not Provided | 2025-05-07 | 2026-04-23 | |
| CVE-2025-31812 json | Not Provided | 2025-04-01 | 2026-04-23 | |
| CVE-2025-23798 json | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ElbowRobo Mass Messagin... | Not Provided | 2025-01-22 | 2026-04-23 |
| CVE-2024-10011 json | The BuddyPress plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 14.1.0 via the... | Not Provided | 2024-10-25 | 2026-04-08 |
| CVE-2024-4892 json | The BuddyPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘display_name’ parameter in vers... | Not Provided | 2024-06-12 | 2026-04-08 |
| CVE-2024-3974 json | The BuddyPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘user_name’ parameter in version... | Not Provided | 2024-05-14 | 2026-04-08 |
| CVE-2023-50880 json | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in The BuddyPress Communit... | Not Provided | 2023-12-29 | 2026-04-28 |
| CVE-2021-21389 json | BuddyPress is an open source WordPress plugin to build a community site. In releases of BuddyPress from 5.0.0 before 7.2.1 it... | 8.8 - HIGH | 2021-03-26 | 2021-04-01 |
| CVE-2020-5244 json | In BuddyPress before 5.1.2, requests to a certain REST API endpoint can result in private user data getting exposed. Authenti... | 7.5 - HIGH | 2020-02-24 | 2020-02-25 |
| CVE-2017-6954 json | An issue was discovered in includes/component.php in the BuddyPress Docs plugin before 1.9.3 for WordPress. It is possible fo... | Not Provided | 2017-03-17 | 2025-04-20 |
| CVE-2014-1889 json | The Group creation process in the Buddypress plugin before 1.9.2 for WordPress allows remote authenticated users to gain cont... | 6.5 - MEDIUM | 2018-04-10 | 2019-04-26 |
| CVE-2014-1888 json | Cross-site scripting (XSS) vulnerability in the BuddyPress plugin before 1.9.2 for WordPress allows remote authenticated user... | Not Provided | 2014-03-01 | 2026-04-29 |
Known software with vulnerabilities from BuddyPress
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Buddypress | Buddypress | 1.0 |
| Application | Buddypress | Buddypress Plugin | 1.5 |