Vulnerabilities in buddydev
9 resultsVexday analysis
BuddyDev apresenta um pequeno portfolio de 3 vulnerabilidades históricas, nenhuma em exploração ativa (KEV) e sem críticas, reduzindo significativamente o risco imediato. A fraqueza dominante é CWE-22 (path traversal), típica de problemas de validação de entrada. Sem novas vulnerabilidades públicas nos últimos 90 dias, o fornecedor não representa ameaça urgente no cenário atual de ataque.
CVE-2025-14997HIGHBuddyPress Xprofile Custom Field Types <= 1.2.8 - Authenticated (Subscriber+) Arbitrary File DeletionEPSS 0.7%CVE-2025-58608HIGHWordPress MediaPress Plugin <= 1.5.9.1 - Local File Inclusion VulnerabilityEPSS 0.5%CVE-2025-30957MEDIUMWordPress Activity Plus Reloaded for BuddyPress plugin <= 1.1.2 - Broken Access Control VulnerabilityEPSS 0.3%CVE-2024-11913MEDIUMActivity Plus Reloaded for BuddyPress <= 1.1.1 - Authenticated (Subscriber+) Blind Server-Side Request ForgeryEPSS 0.2%CVE-2025-58263MEDIUMWordPress BuddyPress Notification Widget Plugin <= 1.3.3 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%CVE-2026-22519MEDIUMWordPress MediaPress plugin <= 1.6.2 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-62949MEDIUMWordPress Activity Plus Reloaded for BuddyPress plugin <= 1.1.2 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-14552MEDIUMMediaPress <= 1.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Plugin's ShortcodeEPSS 0.2%CVE-2025-62760MEDIUMWordPress BuddyPress Activity Shortcode plugin <= 1.1.8 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%