Skip to content
OpenAdvisories

Vendor

Themekraft

25 known vulnerabilities.

Products

BuddyForms 9 Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) 7 BuddyPress WooCommerce My Account Integration. Create WooCommerce Member Pages 3 WooBuddy 2 Post Form – Registration Form – Profile Form for User Profiles and Content Forms for User Submissions 1 TK Google Fonts GDPR Compliant 1 Post Form 1 All in One Invite Codes 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-107622

    BuddyForms <= 2.10.5 - Unauthenticated Privilege Escalation to Form-Type Confusion via 'bf_post_type' Parameter

    The BuddyForms plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.10.5 via a form-type confusion attack through the `bf_post_type` parameter. This is due to the public frontend submission handler `buddyforms_for…

    Themekraft BuddyForms Web / CMS