buddypress Summary

Latest vulnerabilities published by buddypress

JSON RSS CSV 🔔 Create Alert Trigger

9 June 2026

BuddyPress 14.4.0 Friends List IDOR via REST API
CVE-2026-53675
BuddypressBuddypress5.3MEDIUM
BuddyPress 14.4.0 REGEXP Injection via @Mention Username Resolution
CVE-2026-53674
BuddypressBuddypress7.1HIGH
BuddyPress 14.4.0 Private Message IDOR via REST API user_id Parameter
CVE-2026-53673
BuddypressBuddypress8.6HIGH

24 February 2020

Private data exposure via REST API in BuddyPress
CVE-2020-5244
BuddypressBuddypress8HIGH