Skip to content
OpenAdvisories

Vendor

BuddyPress

14 known vulnerabilities.

Products

BuddyPress 14
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.5
    CVE-2026-115965 Public exploit

    WordPress BuddyPress plugin <= 14.5.2 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in BuddyPress BuddyPress buddypress allows Blind SQL Injection.This issue affects BuddyPress: from n/a through 14.5.2.

    BuddyPress BuddyPress
  • High 8.1
    CVE-2021-21389 Public exploit Scanner template EPSS 15%

    BuddyPress privilege escalation via REST API

    BuddyPress is an open source WordPress plugin to build a community site. In releases of BuddyPress from 5.0.0 before 7.2.1 it's possible for a non-privileged, regular user to obtain administrator rights by exploiting an issue in the REST API members endpoint.…

    BuddyPress BuddyPress buddypress/buddypress Web / CMS Packagist