Skip to content
OpenAdvisories

Vendor

BuddyBoss

9 known vulnerabilities.

Products

BuddyBoss 3 Buddyboss Platform 2 BuddyPress Global Search 1 BuddyBoss Theme 1 BuddyBoss App 1 BuddyBoss Platform Pro 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2026-76124

    BuddyBoss App <= 3.2.1 - Authenticated (Subscriber+) Arbitrary File Upload via Feedback Endpoint

    The BuddyBoss App plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.2.1 via the send_feedback function. This is due to insufficient file type validation that relies solely on the client-supplied Content-Type h…

    BuddyBoss BuddyBoss App Web / CMS
  • High 8.8
    CVE-2026-118082

    WordPress Buddyboss Platform plugin <= 3.5.0 - Privilege Escalation vulnerability

    Subscriber Privilege Escalation in Buddyboss Platform <= 3.5.0 versions.

    BuddyBoss Buddyboss Platform