Skip to content
OpenAdvisories

Vendor

lamarant

1 known vulnerabilities.

Products

Buddypress Force Password Change 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.2
    CVE-2025-3793

    Buddypress Force Password Change <= 0.1 - Authenticated (Subscriber+) Account Takeover via Password Update

    The Buddypress Force Password Change plugin for WordPress is vulnerable to authenticated account takeover due to the plugin not properly validating a user's identity prior to updating their password through the 'bp_force_password_ajax' function in all version…

    lamarant Buddypress Force Password Change Web / CMS