Skip to content
Boss Media vulnerabilities
Newest
-
boss media buddyboss platform
BuddyBoss Platform <= 3.6.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Group Name
CVE-2026-96554
6.4 Medium
-
boss media buddyboss platform, buddyboss platform +1 more
WordPress Buddyboss Platform plugin <= 3.5.0 - Privilege Escalation vulnerability
CVE-2026-118082
8.8 High
-
boss media buddyboss platform
WordPress Buddyboss Platform plugin <= 3.1.0 - SQL Injection vulnerability
CVE-2026-39771
8.5 High
-
boss media buddyboss platform
WordPress Buddyboss Platform plugin <= 3.0.5 - SQL Injection vulnerability
CVE-2026-59514
9.3 Critical
-
boss media buddyboss platform, buddyboss platform +1 more
WordPress Buddyboss Platform plugin <= 3.0.4 - PHP Object Injection vulnerability
CVE-2026-56032
9.8 Critical
-
boss media buddyboss platform, buddyboss platform +1 more
BuddyBoss Platform <= 2.8.50 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'bp_nouveau_ajax_media_save' function
CVE-2024-13859
6.4 Medium
-
boss media buddyboss platform, buddyboss platform +1 more
BuddyBoss Platform <= 2.8.50 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'bbp_topic_title'
CVE-2024-13860
6.4 Medium
-
boss media buddyboss platform, buddyboss theme, buddyboss platform +2 more
BuddyBoss Platform and BuddyBoss Theme <= Multiple Versions - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'invitee_name'
CVE-2024-13858
6.4 Medium
-
boss media buddyboss platform, buddyboss platform +1 more
BuddyBoss Platform <= 2.7.70 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'link_title'
CVE-2024-13402
6.4 Medium
-
boss media buddyboss theme, buddyboss llc theme +1 more
WordPress BuddyBoss Theme theme <= 2.4.61 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2024-37925
5.4 Medium
-
boss media buddyboss theme, buddyboss dmcc theme +1 more
WordPress BuddyBoss Theme theme <= 2.4.60 - Unauth. Arbitrary WordPress Settings Change vulnerability
CVE-2023-51477
9.8 Critical