Description
Subscriber PHP Object Injection in Buddyboss Platform <= 3.0.4 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| BuddyBoss | Buddyboss Platform | ≤ 3.0.4 | — |
Critical · 9.8
CVE-2026-56032
EUVD-2026-39695GHSA-c9rr-c93m-9hvh
WordPress Buddyboss Platform plugin <= 3.0.4 - PHP Object Injection vulnerability
Published Jun 26, 2026 · Updated Jun 26, 2026 · Assigned by Patchstack