Skip to content
OpenAdvisories

Vendor

BuddyBoss

9 known vulnerabilities.

Products

BuddyBoss 3 Buddyboss Platform 2 BuddyPress Global Search 1 BuddyBoss Theme 1 BuddyBoss App 1 BuddyBoss Platform Pro 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 5.4
    CVE-2024-37925

    WordPress BuddyBoss Theme theme <= 2.4.61 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in BUDDYBOSS LLC BuddyBoss Theme allows Cross Site Request Forgery.This issue affects BuddyBoss Theme: from n/a through 2.4.61.

    BuddyBoss BuddyBoss Theme
  • Medium 5.9
    CVE-2023-45755

    WordPress BuddyPress Global Search Plugin <= 1.2.1 is vulnerable to Cross Site Scripting (XSS)

    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in BuddyBoss BuddyPress Global Search plugin <= 1.2.1 versions.

    BuddyBoss BuddyPress Global Search
  • Medium 6.3
    CVE-2023-32671

    BuddyBoss XSS vulnerability

    A stored XSS vulnerability has been found on BuddyBoss Platform affecting version 2.2.9. This vulnerability allows an attacker to store a malicious javascript payload via POST request when sending an invitation.

    BuddyBoss BuddyBoss
  • Medium 5.4
    CVE-2023-32669

    Authorization Bypass on BuddyBoss

    Authorization bypass vulnerability in BuddyBoss 2.2.9 version, the exploitation of which could allow an authenticated user to access and rename other users' albums. This vulnerability can be exploited by changing the album identification (id).

    BuddyBoss BuddyBoss