Skip to content
Buddyboss Platform vulnerabilities
-
buddyboss platform, unknown buddyboss-platform +1 more
BuddyBoss platform < 2.7.60 - Private Comment Exposure via IDOR
CVE-2024-12767
3.5 Low
-
buddyboss platform pro, platform +1 more
BuddyBoss Platform Pro <= 2.7.01 - Authentication Bypass via Apple OAuth provider
CVE-2025-1909
9.8 Critical
-
boss media buddyboss platform, buddyboss platform +1 more
BuddyBoss Platform <= 2.8.50 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'bp_nouveau_ajax_media_save' function
CVE-2024-13859
6.4 Medium
-
boss media buddyboss platform, buddyboss platform +1 more
BuddyBoss Platform <= 2.8.50 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'bbp_topic_title'
CVE-2024-13860
6.4 Medium
-
boss media buddyboss platform, buddyboss theme, buddyboss platform +2 more
BuddyBoss Platform and BuddyBoss Theme <= Multiple Versions - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'invitee_name'
CVE-2024-13858
6.4 Medium
-
boss media buddyboss platform, buddyboss platform +1 more
BuddyBoss Platform <= 2.7.70 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'link_title'
CVE-2024-13402
6.4 Medium
-
buddyboss platform, unknown buddyboss-platform +1 more
BuddyBoss Platform < 2.6.0 - Subscriber+ Comment on Private Post via IDOR
CVE-2024-4886
4.3 Medium