Skip to content
OpenAdvisories

Vendor

BuddyBoss

10 known vulnerabilities.

Products

BuddyBoss 3 Buddyboss Platform 3 BuddyPress Global Search 1 BuddyBoss Theme 1 BuddyBoss App 1 BuddyBoss Platform Pro 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 9.3
    CVE-2026-59514

    WordPress Buddyboss Platform plugin <= 3.0.5 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in BuddyBoss Buddyboss Platform buddyboss-platform allows Blind SQL Injection.This issue affects Buddyboss Platform: from n/a through 3.0.5.

    BuddyBoss Buddyboss Platform
  • Critical 9.8
    CVE-2026-56032

    WordPress Buddyboss Platform plugin <= 3.0.4 - PHP Object Injection vulnerability

    Subscriber PHP Object Injection in Buddyboss Platform <= 3.0.4 versions.

    BuddyBoss Buddyboss Platform
  • Critical 9.8
    CVE-2025-1909

    BuddyBoss Platform Pro <= 2.7.01 - Authentication Bypass via Apple OAuth provider

    The BuddyBoss Platform Pro plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.7.01. This is due to insufficient verification on the user being supplied during the Apple OAuth authenticate request through the plugin…

    BuddyBoss BuddyBoss Platform Pro Web / CMS
  • Critical 9.0
    CVE-2023-32670

    BuddyBoss XSS vulnerability

    Cross-Site Scripting vulnerability in BuddyBoss 2.2.9 version , which could allow a local attacker with basic privileges to execute a malicious payload through the "[name]=image.jpg" parameter, allowing to assign a persistent javascript payload that would be …

    BuddyBoss BuddyBoss