Buddyboss-platform (Unknown) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2025-05-15. Vendor: Unknown.

CVEs of Buddyboss-platform

• CVE-2024-12767 - CVSS 3.5 (low), 2025-05-15: The buddyboss-platform WordPress plugin before 2.7.60 lacks proper access controls and allows a logged-in user to view comments on private posts
• CVE-2024-4886 - CVSS 4.3 (medium), 2024-06-05: The contains an IDOR vulnerability that allows a user to comment on a private post by manipulating the ID included in the request
• CVE-2024-4750 - CVSS 5.3 (medium), 2024-06-04: The buddyboss-platform WordPress plugin before 2.6.0 contains an IDOR vulnerability that allows a user to like a private post by manipulating the ID included…