Vulnerabilidades en BuddyDev
9 resultadosAnálisis Vexday
BuddyDev apresenta um portfólio reduzido de 6 vulnerabilidades conhecidas, nenhuma em exploração ativa ou classificada como crítica, o que indica risco baixo no presente. A fraqueza predominante é cross-site scripting (CWE-79), típica de aplicações web, sem movimentação recente na base (zero CVEs nos últimos 90 dias).
CVE-2025-14997HIGHBuddyPress Xprofile Custom Field Types <= 1.2.8 - Authenticated (Subscriber+) Arbitrary File DeletionEPSS 0.7%CVE-2025-58608HIGHWordPress MediaPress Plugin <= 1.5.9.1 - Local File Inclusion VulnerabilityEPSS 0.5%CVE-2025-30957MEDIUMWordPress Activity Plus Reloaded for BuddyPress plugin <= 1.1.2 - Broken Access Control VulnerabilityEPSS 0.3%CVE-2024-11913MEDIUMActivity Plus Reloaded for BuddyPress <= 1.1.1 - Authenticated (Subscriber+) Blind Server-Side Request ForgeryEPSS 0.2%CVE-2025-58263MEDIUMWordPress BuddyPress Notification Widget Plugin <= 1.3.3 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%CVE-2026-22519MEDIUMWordPress MediaPress plugin <= 1.6.2 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-62949MEDIUMWordPress Activity Plus Reloaded for BuddyPress plugin <= 1.1.2 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-14552MEDIUMMediaPress <= 1.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Plugin's ShortcodeEPSS 0.2%CVE-2025-62760MEDIUMWordPress BuddyPress Activity Shortcode plugin <= 1.1.8 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%