Description
Unauthenticated Broken Access Control in BuddyForms <= 2.9.0 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Themekraft | BuddyForms | ≤ 2.9.0 | — |
Medium · 6.5
CVE-2026-81785
EUVD-2026-75518GHSA-29mc-377g-5f4h
WordPress BuddyForms plugin <= 2.9.0 - Broken Access Control vulnerability
Published Sep 10, 2026 · Updated Sep 10, 2026 · Assigned by Patchstack