Medium · 4.3 CVE-2022-45074 EUVD-2022-47995GHSA-7gxc-cpf8-gf68

WordPress Activity Reactions For Buddypress Plugin <= 1.0.22 is vulnerable to Cross Site Request Forgery (CSRF)

Published Apr 23, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Paramveer Singh for Arete IT Private Product: Activity Reactions For Buddypress

Description

Cross-Site Request Forgery (CSRF) vulnerability in Paramveer Singh for Arete IT Private Limited Activity Reactions For Buddypress plugin <= 1.0.22 versions.

Affected products

Vendor	Product	Affected	Fixed
Paramveer Singh for Arete IT Private	Activity Reactions For Buddypress	≤ 1.0.22	—

References

https://patchstack.com/database/vulnerability/activity-reactions-for-buddypress/wordpress-activity-reactions-for-buddypress-plugin-1-0-22-cross-site-request-forgery-csrf-vulnerability?_s_id=cve vdb-entry