Critical · 9.8 CVE-2023-51477 EUVD-2023-56190GHSA-rw4h-rxmp-j7hg

WordPress BuddyBoss Theme theme <= 2.4.60 - Unauth. Arbitrary WordPress Settings Change vulnerability

Published Apr 24, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: BUDDYBOSS DMCC Product: BuddyBoss Theme

Description

Improper Authentication vulnerability in BUDDYBOSS DMCC BuddyBoss Theme allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects BuddyBoss Theme: from n/a through 2.4.60.

Affected products

Vendor	Product	Affected	Fixed
BUDDYBOSS DMCC	BuddyBoss Theme	≤ 2.4.60	—

References

https://patchstack.com/database/vulnerability/buddyboss-theme/wordpress-buddyboss-theme-theme-2-4-60-unauthenticated-arbitrary-wordpress-settings-change-vulnerability?_s_id=cve vdb-entry