Medium
CVE-2025-31812
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 146
Reset filters
High
CVE-2024-13611
Better Messages – Live Chat for WordPress, BuddyPress, PeepSo, Ultimate Member, BuddyBoss <= 2.6.9 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory
Medium
CVE-2025-1780
BuddyPress WooCommerce My Account Integration. Create WooCommerce Member Pages <= 3.4.25 - Cross-Site Request Forgery to Limited Settings Update
Medium
CVE-2024-13697
Better Messages – Live Chat for WordPress, BuddyPress, PeepSo, Ultimate Member, BuddyBoss <= 2.7.4 - Unauthenticated Limited Server-Side Request Forgery in nice_links
Medium
CVE-2024-13358
BuddyPress WooCommerce My Account Integration. Create WooCommerce Member Pages <= 3.4.24 - Missing Authorization to Authenticated (Subscriber+) Limited Settings Update
High
CVE-2025-1295
Templines Elementor Helper Core <= 2.7 - Authenticated (Subscriber+) Privilege Escalation
Medium
CVE-2024-13529
SocialV - Social Network and Community BuddyPress Theme <= 2.0.15 - Missing Authorization to Arbitrary File Download
Medium
CVE-2024-13612
Better Messages – Live Chat for WordPress, BuddyPress, PeepSo, Ultimate Member, BuddyBoss <= 2.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-13370
Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress <= 1.3.3 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update (save_addon_key_license)
Medium
CVE-2024-13368
Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress <= 1.3.4 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update
Medium
CVE-2024-12113
Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress By KaineLabs <= 1.3.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Review Deletion
Medium
CVE-2024-11913
Activity Plus Reloaded for BuddyPress <= 1.1.1 - Authenticated (Subscriber+) Blind Server-Side Request Forgery
Medium
CVE-2025-23771
Push Notification for Post and BuddyPress <= 2.11 - Missing Authorization to Unauthenticated Settings Update
Medium
CVE-2025-23798
Mass Messaging in BuddyPress <= 2.2.1 - Reflected Cross-Site Scripting
Medium
CVE-2025-23706
Jet Skinner for BuddyPress <= 1.2.5 - Reflected Cross-Site Scripting
Medium
CVE-2024-12407
Push Notification for Post and BuddyPress <= 2.07 - Reflected Cross-Site Scripting
Medium
CVE-2024-56209
Kleo < 5.4.4 - Reflected Cross-Site Scripting
Medium
CVE-2024-10778
BuddyPress Builder for Elementor – BuddyBuilder <= 1.7.4 - Authenticated (Contributor+) Post Disclosure
Medium
CVE-2025-24538
BuddyPress Groups Extras <= 3.6.10 - Cross-Site Request Forgery
High
CVE-2024-10011
BuddyPress <= 14.1.0 - Authenticated (Subscriber+) Directory Traversal
Medium
CVE-2024-49650
BuddyPress Greeting Message <= 1.0.3 - Reflected Cross-Site Scripting
Critical
CVE-2024-49247
BuddyPress Better Registration <= 1.6 - Authentication Bypass to Administrator
Medium
CVE-2024-8987
Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress <= 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via youzify_media Shortcode
Medium
CVE-2024-9067
Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress <= 1.3.0 - Missing Authorization to Arbitrary (Subscriber+) Attachment Deletion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.