Skip to contentBoss Media Buddyboss Platform vulnerabilities
- boss media buddyboss platformBuddyBoss Platform <= 3.6.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Group NameCVE-2026-965546.4 Medium
- boss media buddyboss platform, buddyboss platform +1 moreWordPress Buddyboss Platform plugin <= 3.5.0 - Privilege Escalation vulnerabilityCVE-2026-1180828.8 High
- boss media buddyboss platformWordPress Buddyboss Platform plugin <= 3.1.0 - SQL Injection vulnerabilityCVE-2026-397718.5 High
- boss media buddyboss platformWordPress Buddyboss Platform plugin <= 3.0.5 - SQL Injection vulnerabilityCVE-2026-595149.3 Critical
- boss media buddyboss platform, buddyboss platform +1 moreWordPress Buddyboss Platform plugin <= 3.0.4 - PHP Object Injection vulnerabilityCVE-2026-560329.8 Critical
- boss media buddyboss platform, buddyboss platform +1 moreBuddyBoss Platform <= 2.8.50 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'bp_nouveau_ajax_media_save' functionCVE-2024-138596.4 Medium
- boss media buddyboss platform, buddyboss platform +1 moreBuddyBoss Platform <= 2.8.50 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'bbp_topic_title'CVE-2024-138606.4 Medium
- boss media buddyboss platform, buddyboss theme, buddyboss platform +2 moreBuddyBoss Platform and BuddyBoss Theme <= Multiple Versions - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'invitee_name'CVE-2024-138586.4 Medium
- boss media buddyboss platform, buddyboss platform +1 moreBuddyBoss Platform <= 2.7.70 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'link_title'CVE-2024-134026.4 Medium