<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: buddypress</title><description>Every new CVE for buddypress.</description><link>https://agentprime.io/</link><item><title>CVE-2026-115965: WordPress BuddyPress plugin &lt;= 14.5.2 - SQL Injection vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-115965/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-115965/</guid><description>CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 29 Oct 2026 11:00:24 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-111850: WordPress BuddyPress plugin &lt;= 14.5.2 - SQL Injection vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-111850/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-111850/</guid><description>CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 28 Oct 2026 13:00:27 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-12145: BuddyPress &lt;= 14.3.3 - Insecure Direct Object Reference to Notifications Deletion</title><link>https://agentprime.io/advisories/CVE-2024-12145/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-12145/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 11 Sep 2026 11:28:52 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-8155: BuddyPress &lt; 14.5.0 - Subscriber+ Private Messages Disclosure via IDOR</title><link>https://agentprime.io/advisories/CVE-2026-8155/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-8155/</guid><description>CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 31 Jul 2026 06:00:10 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-1360: BuddyPress &lt;= 14.5.0 - Authenticated (Subscriber+) PHP Object Injection via XProfile Field Data</title><link>https://agentprime.io/advisories/CVE-2026-1360/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-1360/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 30 Jul 2026 04:03:14 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-53674: BuddyPress 14.4.0 REGEXP Injection via @Mention Username Resolution</title><link>https://agentprime.io/advisories/CVE-2026-53674/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-53674/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 09 Jun 2026 23:44:21 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-11976: BuddyPress &lt;= 14.3.3 - Unauthenticated Arbitrary Shortcode Execution</title><link>https://agentprime.io/advisories/CVE-2024-11976/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-11976/</guid><description>CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 23 Jan 2026 06:45:11 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-62022: WordPress BuddyPress plugin &lt;= 14.3.4 - Broken Access Control vulnerability</title><link>https://agentprime.io/advisories/CVE-2025-62022/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-62022/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 22 Oct 2025 14:32:49 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-10011: BuddyPress &lt;= 14.1.0 - Authenticated (Subscriber+) Directory Traversal</title><link>https://agentprime.io/advisories/CVE-2024-10011/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-10011/</guid><description>CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 25 Oct 2024 06:51:24 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-4892: BuddyPress &lt;= 12.4.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting</title><link>https://agentprime.io/advisories/CVE-2024-4892/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-4892/</guid><description>CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 12 Jun 2024 01:55:22 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-3974: BuddyPress &lt;= 12.4.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting</title><link>https://agentprime.io/advisories/CVE-2024-3974/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-3974/</guid><description>CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 09 May 2024 20:03:23 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-50880: WordPress BuddyPress Plugin &lt;= 11.3.1 is vulnerable to Cross Site Scripting (XSS)</title><link>https://agentprime.io/advisories/CVE-2023-50880/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-50880/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 29 Dec 2023 11:28:39 GMT</pubDate><category>CVE</category></item></channel></rss>