buddypress kayıtları

buddypress üreticisine ait 11 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren: 0 · %0
Silahlaştırılmış: 0 · %0
Pre-auth RCE: 1
Düzeltme kaydı olan: %36,4
Yayından KEV’e ortanca: KEV’e giren kayıt yok

Yıllara göre kayıt

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

Saldırı profili

Tüm kayıtlar

11 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
39İzleyin	CVE-2021-21389Kavram kanıtı	BuddyPress privilege escalation via REST APIbuddypress · buddypress · CWE-863 Erişim denetimi (IDOR)	Yüksek8,8	—	%14,8	26 Mar 2021
32İzleyin	CVE-2024-10011İstismar yok	BuddyPress <= 14.1.0 - Authenticated (Subscriber+) Directory Traversalbuddypress · buddypress · CWE-22 Yol geçişi	Yüksek8,1	—	%1,1	25 Eki 2024
31İzleyin	CVE-2012-2109Kavram kanıtı	SQL injection vulnerability in wp-load.php in the BuddyPress plugin 1.5.x before 1.5.5 of WordPress allows remote attackers to execute arbitbuddypress · buddypress · CWE-89 Girişsiz RCE SQL enjeksiyonu	Yüksek7,5	—	%3,3	4 Eyl 2012
31İzleyin	CVE-2020-5244İstismar yok	Private data exposure via REST API in BuddyPressbuddypress · buddypress · CWE-284 Kimlik doğrulamasız Erişim denetimi (IDOR)	Yüksek7,5	—	%2,4	24 Şub 2020
29İzleyin	CVE-2014-1889Kavram kanıtı	The Group creation process in the Buddypress plugin before 1.9.2 for WordPress allows remote authenticated users to gain control of arbitrarbuddypress · buddypress · CWE-264	Orta6,5	—	%10,6	10 Nis 2018
24İzleyin	CVE-2025-23798İstismar yok	WordPress Mass Messaging in BuddyPress Plugin <= 2.2.1 - Reflected Cross Site Scripting (XSS) vulnerabilitybuddypress · buddypress · CWE-79 Kimlik doğrulamasız XSS	Orta6,1	—	%0,3	22 Oca 2025
21İzleyin	CVE-2024-3974İstismar yok	BuddyPress <= 12.4.0 - Authenticated (Subscriber+) Stored Cross-Site Scriptingbuddypress · buddypress · CWE-79 XSS	Orta5,4	—	%0,4	14 May 2024
21İzleyin	CVE-2024-4892İstismar yok	BuddyPress <= 12.4.1 - Authenticated (Subscriber+) Stored Cross-Site Scriptingbuddypress · buddypress · CWE-79 XSS	Orta5,4	—	%0,3	11 Haz 2024
21İzleyin	CVE-2023-50880İstismar yok	WordPress BuddyPress Plugin <= 11.3.1 is vulnerable to Cross Site Scripting (XSS)buddypress · buddypress · CWE-79 XSS	Orta5,4	—	%0,3	29 Ara 2023
18İzleyin	CVE-2014-1888İstismar yok	Cross-site scripting (XSS) vulnerability in the BuddyPress plugin before 1.9.2 for WordPress allows remote authenticated users to inject arbbuddypress · buddypress · CWE-79 Kimlik doğrulamasız Kimlik doğrulama atlatma XSS	Orta4,3	—	%2,5	28 Şub 2014
17İzleyin	CVE-2017-6954İstismar yok	An issue was discovered in includes/component.php in the BuddyPress Docs plugin before 1.9.3 for WordPress.buddypress · buddypress · CWE-269	Orta4,3	—	%1,1	17 Mar 2017

CVE-2021-21389
39İzleyin
BuddyPress privilege escalation via REST API
YüksekCVSS 8,8Kavram kanıtıEPSS %14
- Erişim denetimi (IDOR)
buddypress · buddypress26 Mar 2021
CVE-2024-10011
32İzleyin
BuddyPress <= 14.1.0 - Authenticated (Subscriber+) Directory Traversal
YüksekCVSS 8,1İstismar yokEPSS %1
- Yol geçişi
buddypress · buddypress25 Eki 2024
CVE-2012-2109
31İzleyin
SQL injection vulnerability in wp-load.php in the BuddyPress plugin 1.5.x before 1.5.5 of WordPress allows remote attackers to execute arbit
YüksekCVSS 7,5Kavram kanıtıEPSS %3
- Girişsiz RCE
- SQL enjeksiyonu
buddypress · buddypress4 Eyl 2012
CVE-2020-5244
31İzleyin
Private data exposure via REST API in BuddyPress
YüksekCVSS 7,5İstismar yokEPSS %2
- Kimlik doğrulamasız
- Erişim denetimi (IDOR)
buddypress · buddypress24 Şub 2020
CVE-2014-1889
29İzleyin
The Group creation process in the Buddypress plugin before 1.9.2 for WordPress allows remote authenticated users to gain control of arbitrar
OrtaCVSS 6,5Kavram kanıtıEPSS %10
buddypress · buddypress10 Nis 2018
CVE-2025-23798
24İzleyin
WordPress Mass Messaging in BuddyPress Plugin <= 2.2.1 - Reflected Cross Site Scripting (XSS) vulnerability
OrtaCVSS 6,1İstismar yokEPSS %0
- Kimlik doğrulamasız
- XSS
buddypress · buddypress22 Oca 2025
CVE-2024-3974
21İzleyin
BuddyPress <= 12.4.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting
OrtaCVSS 5,4İstismar yokEPSS %0
- XSS
buddypress · buddypress14 May 2024
CVE-2024-4892
21İzleyin
BuddyPress <= 12.4.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
OrtaCVSS 5,4İstismar yokEPSS %0
- XSS
buddypress · buddypress11 Haz 2024
CVE-2023-50880
21İzleyin
WordPress BuddyPress Plugin <= 11.3.1 is vulnerable to Cross Site Scripting (XSS)
OrtaCVSS 5,4İstismar yokEPSS %0
- XSS
buddypress · buddypress29 Ara 2023
CVE-2014-1888
18İzleyin
Cross-site scripting (XSS) vulnerability in the BuddyPress plugin before 1.9.2 for WordPress allows remote authenticated users to inject arb
OrtaCVSS 4,3İstismar yokEPSS %2
buddypress · buddypress28 Şub 2014
CVE-2017-6954
17İzleyin
An issue was discovered in includes/component.php in the BuddyPress Docs plugin before 1.9.3 for WordPress.
OrtaCVSS 4,3İstismar yokEPSS %1
buddypress · buddypress17 Mar 2017