Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1020 CNY

100%
Buy Us a Coffee

Buddypress — Vulnerabilities & Security Advisories 9

All 9 CVE vulnerabilities found in Buddypress, with AI-generated Chinese analysis, references, and POCs.

Vendor: buddypress

CVE IDTitleCVSSSeverityPublished
CVE-2020-37233 WordPress Plugin Buddypress 6.2.0 Persistent Cross-Site Scripting CWE-79 6.4 Medium2026-05-16
CVE-2024-11976 BuddyPress <= 14.3.3 - Unauthenticated Arbitrary Shortcode Execution CWE-94 7.3 High2026-01-23
CVE-2025-62022 WordPress BuddyPress plugin <= 14.3.4 - Broken Access Control vulnerability CWE-862 7.5 High2025-10-22
CVE-2024-10011 BuddyPress <= 14.1.0 - Authenticated (Subscriber+) Directory Traversal CWE-22 8.1 High2024-10-25
CVE-2024-4892 BuddyPress <= 12.4.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting CWE-79 6.4 Medium2024-06-12
CVE-2024-3974 BuddyPress <= 12.4.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting CWE-79 6.4 Medium2024-05-09
CVE-2023-50880 WordPress BuddyPress Plugin <= 11.3.1 is vulnerable to Cross Site Scripting (XSS) CWE-79 6.5 Medium2023-12-29
CVE-2021-21389 BuddyPress privilege escalation via REST API CWE-863 8.1 High2021-03-26
CVE-2020-5244 Private data exposure via REST API in BuddyPress CWE-284 8.0 High2020-02-24

All 9 known CVE vulnerabilities affecting Buddypress with full Chinese analysis, references, and POCs where available.