Skip to content
OpenAdvisories
Medium · 4.3 CVE-2017-6954 EUVD-2022-3456GHSA-9wf6-88x4-6xvj

BuddyPress Docs plugin Improper Privilege Management

Published Mar 17, 2017 · Updated Aug 5, 2024 · Assigned by mitre

Description

An issue was discovered in includes/component.php in the BuddyPress Docs plugin before 1.9.3 for WordPress. It is possible for authenticated users to edit documents of other users without proper permissions.

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist buddypress/buddypress < 1.9.3 1.9.3 GHSA-9wf6-88x4-6xvj

References