Vulnerabilities in BuddyBoss
8 resultsCVE-2025-1909CRITICALBuddyBoss Platform Pro <= 2.7.01 - Authentication Bypass via Apple OAuth providerEPSS 0.7%CVE-2026-56032CRITICALWordPress Buddyboss Platform plugin <= 3.0.4 - PHP Object Injection vulnerabilityEPSS 0.6%CVE-2023-45755MEDIUMWordPress BuddyPress Global Search Plugin <= 1.2.1 is vulnerable to Cross Site Scripting (XSS)EPSS 0.5%CVE-2026-76124HIGHBuddyBoss App <= 3.2.1 - Authenticated (Subscriber+) Arbitrary File Upload via Feedback EndpointEPSS 0.4%CVE-2023-32670CRITICALBuddyBoss XSS vulnerabilityEPSS 0.4%CVE-2023-32671MEDIUMBuddyBoss XSS vulnerabilityEPSS 0.4%CVE-2026-118082HIGHWordPress Buddyboss Platform plugin <= 3.5.0 - Privilege Escalation vulnerabilityEPSS 0.4%CVE-2023-32669MEDIUMAuthorization Bypass on BuddyBossEPSS 0.4%