Skip to content
OpenAdvisories

Package · Packagist

bbpress/bbpress

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • Critical 9.8
    CVE-2020-13693 Public exploit EPSS 44%

    bbPress unauthenticated privilege-escalation

    An unauthenticated privilege-escalation issue exists in the bbPress plugin before 2.6.5 for WordPress when New User Registration is enabled.

    bbpress/bbpress Packagist
  • Medium 4.8
    CVE-2020-13487

    bbPress stored Cross-Site Scripting (XSS) vulnerability in the Forum creation section

    The bbPress plugin through 2.6.4 for WordPress has stored XSS in the Forum creation section, resulting in JavaScript execution at wp-admin/edit.php?post_type=forum (aka the Forum listing page) for all users. An administrator can exploit this at the wp-admin/p…

    bbpress/bbpress Packagist
  • Medium 6.1
    CVE-2011-1150

    bbPress Cross-site Scripting (XSS) vulnerability

    bbPress through 1.0.2 has XSS in /bb-login.php url via the re parameter.

    bbPress bbPress bbpress/bbpress Packagist