Advisories · Technology
Buddyboss Platform.
Every CVE that names Buddyboss Platform among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.8 High
WordPress Buddyboss Platform plugin <= 3.5.0 - Privilege Escalation vulnerability
- Buddyboss Platform
- Privilege escalation
- CVSS 9.8 CriticalCritical · CVSS 9+
WordPress Buddyboss Platform plugin <= 3.0.4 - PHP Object Injection vulnerability
- Buddyboss Platform
- Insecure deserialization
- CVSS 3.5 Low
BuddyBoss platform < 2.7.60 - Private Comment Exposure via IDOR
- buddyboss-platform
- CVSS 4.3 Medium
BuddyBoss Platform < 2.6.0 - Subscriber+ Comment on Private Post via IDOR
- buddyboss-platform
- CVSS 5.3 Medium
BuddyBoss Platform < 2.6.0 - Insecure Direct Object Reference on Like Comment
- buddyboss-platform