Skip to content
OpenAdvisories

Vendor

boonebgorges

2 known vulnerabilities.

Products

BuddyPress Docs 1 BuddyPress Groupblog 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2026-5144

    BuddyPress Groupblog <= 1.9.3 - Authenticated (Subscriber+) Privilege Escalation to Administrator via Group Blog IDOR

    The BuddyPress Groupblog plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.9.3. This is due to the group blog settings handler accepting the `groupblog-blogid`, `default-member`, and `groupblog-silent-add` para…

    boonebgorges BuddyPress Groupblog Web / CMS