Skip to content
OpenAdvisories

Package · Packagist

buddypress/buddypress

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.3
    CVE-2026-53675

    BuddyPress 14.4.0 Friends List IDOR via REST API

    BuddyPress 14.4.0 contains an insecure direct object reference vulnerability in the friends REST API that allows any authenticated attacker to enumerate another user's complete friend list. Attackers can query the friends endpoint with an arbitrary user_id be…

    BuddyPress BuddyPress buddypress/buddypress Packagist
  • Medium 4.3
    CVE-2017-6954

    BuddyPress Docs plugin Improper Privilege Management

    An issue was discovered in includes/component.php in the BuddyPress Docs plugin before 1.9.3 for WordPress. It is possible for authenticated users to edit documents of other users without proper permissions.

    buddypress/buddypress Packagist