Advisories · Technology
BuddyForms.
Every CVE that names BuddyForms among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 3.7 Low
BuddyForms 2.8.8 - 2.10.0 - Unauthenticated Guest Attachment Deletion
- BuddyForms
- Path traversal
- CVSS 5.3 Medium
BuddyForms < 2.10.1 - Subscriber+ Arbitrary Post Modification
- BuddyForms
- Broken access control
- CVSS 5.3 Medium
BuddyForms < 2.10.3 - Unauthenticated Form Configuration Disclosure
- BuddyForms
- Information disclosure