Name: Vietnam CyStack Joint Stock Company
Address: Tan Hong Ha Complex, 317 Truong Chinh Street, Hanoi, Vietnam, 100000, VN
Telephone: (+84) 247 109 9656
Price range: Negotiable

Products & ServicesProducts & Services
SolutionsSolutions
PricingPricing
CompanyCompany
ResourcesResources

VulnScan

buddypress Security Vulnerabilities | CyStack CVE Database

Vulnerability	Exploitation status	Fix	Affected product	Published	Severity

`CVE-2024-12145`BuddyPress <= 14.3.3 - Insecure Direct Object Reference to Notifications Deletion	Exploitation statusNot known exploited	FixYes	Affected productBuddyPress	Published09/11/2026	SeverityMedium
`CVE-2026-1360`BuddyPress <= 14.5.0 - Authenticated (Subscriber+) PHP Object Injection via XProfile Field Data	Exploitation statusNot known exploited	FixYes	Affected productBuddyPress	Published07/30/2026	SeverityHigh
`CVE-2026-53675`BuddyPress 14.4.0 Friends List IDOR via REST API	Exploitation statusNot known exploited	FixNot confirmed	Affected productBuddyPress	Published06/09/2026	SeverityMedium
`CVE-2026-53674`BuddyPress 14.4.0 REGEXP Injection via @Mention Username Resolution	Exploitation statusNot known exploited	FixNot confirmed	Affected productBuddyPress	Published06/09/2026	SeverityHigh
`CVE-2026-53673`BuddyPress 14.4.0 Private Message IDOR via REST API user_id Parameter	Exploitation statusNot known exploited	FixNot confirmed	Affected productBuddyPress	Published06/09/2026	SeverityHigh
`CVE-2024-11976`BuddyPress <= 14.3.3 - Unauthenticated Arbitrary Shortcode Execution	Exploitation statusNot known exploited	FixYes	Affected productBuddyPress	Published01/23/2026	SeverityHigh
`CVE-2025-62022`WordPress BuddyPress plugin <= 14.3.4 - Broken Access Control vulnerability	Exploitation statusNot known exploited	FixYes	Affected productBuddyPress	Published10/22/2025	SeverityHigh
`CVE-2025-23798`WordPress Mass Messaging in BuddyPress Plugin <= 2.2.1 - Reflected Cross Site Scripting (XSS) vulnerability	Exploitation statusNot known exploited	FixYes	Affected productMass Messaging in BuddyPress	Published01/22/2025	SeverityHigh
`CVE-2024-10011`BuddyPress <= 14.1.0 - Authenticated (Subscriber+) Directory Traversal	Exploitation statusNot known exploited	FixYes	Affected productBuddyPress	Published10/25/2024	SeverityHigh
`CVE-2024-4892`BuddyPress <= 12.4.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting	Exploitation statusNot known exploited	FixYes	Affected productBuddyPress	Published06/12/2024	SeverityMedium
`CVE-2024-3974`BuddyPress <= 12.4.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting	Exploitation statusNot known exploited	FixYes	Affected productBuddyPress	Published05/09/2024	SeverityMedium
`CVE-2023-50880`WordPress BuddyPress Plugin <= 11.3.1 is vulnerable to Cross Site Scripting (XSS)	Exploitation statusNot known exploited	FixYes	Affected productBuddyPress	Published12/29/2023	SeverityMedium
`CVE-2021-21389`BuddyPress privilege escalation via REST API	Exploitation statusNot confirmed	FixYes	Affected productBuddyPress	Published03/26/2021	SeverityHigh
`CVE-2020-5244`Private data exposure via REST API in BuddyPress	Exploitation statusNot confirmed	FixYes	Affected productBuddyPress	Published02/24/2020	SeverityHigh
`CVE-2014-1889`	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published04/10/2018	SeverityUnknown
`CVE-2017-6954`	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published03/17/2017	SeverityUnknown
`CVE-2014-1888`	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published02/28/2014	SeverityUnknown
`CVE-2012-2109`	Exploitation statusPublic exploit	FixNot confirmed	Affected productNot confirmed	Published09/04/2012	SeverityUnknown

18 / 18 Results

All vulnerabilities loaded

Security vulnerabilities from buddypress

buddypress

How many security vulnerabilities does buddypress have?

Which buddypress product has the most security vulnerabilities?

Filters

Run an in-depth assessment with complete web risk management

Popular buddypress products

BuddyPress