Vulnerabilities in BuddyDev
10 resultsCVE-2025-14997HIGHBuddyPress Xprofile Custom Field Types <= 1.2.8 - Authenticated (Subscriber+) Arbitrary File DeletionEPSS 0.7%CVE-2025-58608HIGHWordPress MediaPress Plugin <= 1.5.9.1 - Local File Inclusion VulnerabilityEPSS 0.6%CVE-2026-116868HIGHWordPress BuddyPress Xprofile Custom Field Types plugin <= 1.3.1 - PHP Object Injection vulnerabilityEPSS 0.4%CVE-2025-30957MEDIUMWordPress Activity Plus Reloaded for BuddyPress plugin <= 1.1.2 - Broken Access Control VulnerabilityEPSS 0.3%CVE-2024-11913MEDIUMActivity Plus Reloaded for BuddyPress <= 1.1.1 - Authenticated (Subscriber+) Blind Server-Side Request ForgeryEPSS 0.2%CVE-2025-58263MEDIUMWordPress BuddyPress Notification Widget Plugin <= 1.3.3 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%CVE-2025-62949MEDIUMWordPress Activity Plus Reloaded for BuddyPress plugin <= 1.1.2 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-22519MEDIUMWordPress MediaPress plugin <= 1.6.2 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-14552MEDIUMMediaPress <= 1.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Plugin's ShortcodeEPSS 0.2%CVE-2025-62760MEDIUMWordPress BuddyPress Activity Shortcode plugin <= 1.1.8 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%