Description
The buddyboss-platform WordPress plugin before 2.6.0 contains an IDOR vulnerability that allows a user to like a private post by manipulating the ID included in the request
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | buddyboss-platform | < 2.6.0 | 2.6.0 |
References
- https://wpscan.com/vulnerability/ffbe4034-842b-43b0-97d1-208811376dea/ exploit vdb-entry technical-description