Skip to content
OpenAdvisories

Package · Packagist

buddypress/buddypress

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.1
    CVE-2021-21389 Public exploit Scanner template EPSS 15%

    BuddyPress privilege escalation via REST API

    BuddyPress is an open source WordPress plugin to build a community site. In releases of BuddyPress from 5.0.0 before 7.2.1 it's possible for a non-privileged, regular user to obtain administrator rights by exploiting an issue in the REST API members endpoint.…

    BuddyPress BuddyPress buddypress/buddypress Web / CMS Packagist