Unknown Buddypress vulnerabilities

• muralidharan ramasamy push notification for post and buddypress WordPress Push Notification for Post and BuddyPress plugin <= 3.23 - Broken Access Control vulnerability CVE-2026-107417 6.5 MediumOctober 14, 2026
• rtcamp rtmedia for wordpress, buddypress and bbpress rtMedia for WordPress, BuddyPress and bbPress < 4.7.14 - Subscriber+ Arbitrary Album Media Injection via IDOR CVE-2026-88927 4.3 MediumOctober 14, 2026
• unknown buddypress instant chat BuddyPress Instant Chat <= 1.6 - Unauthenticated Stored XSS via Chat Message CVE-2026-87764 8.8 HighOctober 11, 2026
• rtcamp rtmedia for wordpress, buddypress and bbpress rtMedia for WordPress, BuddyPress and bbPress < 4.7.12 - Subscriber+ Arbitrary Activity Privacy Modification via IDOR CVE-2026-88912 4.2 MediumSeptember 13, 2026
• murali push notification for post and buddypress WordPress Push Notification for Post and BuddyPress plugin <= 3.20 - Broken Access Control vulnerability CVE-2026-81279 5.4 MediumAugust 27, 2026
• unknown buddypress BuddyPress < 14.5.0 - Subscriber+ Private Messages Disclosure via IDOR CVE-2026-8155 5.4 MediumJuly 31, 2026
• boonebgorges buddypress docs BuddyPress Docs < 2.2.5 - Subscriber+ Arbitrary Document Read/Update CVE-2025-5526 4.3 MediumJune 27, 2025
• pnfpb push notification for post and buddypress Push Notification for Post and BuddyPress <=1.93 - Multiple Unauthenticated SQLi CVE-2024-6159 9.8 CriticalMay 15, 2025
• murali push notification for post and buddypress WordPress Push Notification for Post and BuddyPress plugin <= 2.11 - Settings Change vulnerability CVE-2025-23771 6.5 MediumFebruary 14, 2025
• murali-indiacitys push notification for post and buddypress Push Notification for Post and BuddyPress <= 2.07 - Reflected Cross-Site Scripting CVE-2024-12407 6.1 MediumJanuary 11, 2025
• boonebgorges buddypress docs BuddyPress Docs <= 2.2.3 - Reflected Cross-Site Scripting CVE-2024-9207 6.1 MediumOctober 8, 2024
• rtcamp rtmedia, rtmedia for wordpress, buddypress and bbpress +1 more rtMedia for WordPress, BuddyPress and bbPress < 4.6.16 - Admin+ RCE CVE-2023-5939 7.2 HighDecember 26, 2023
• rtcamp rtmedia, rtmedia for wordpress, buddypress and bbpress +1 more rtMedia for WordPress, BuddyPress and bbPress < 4.6.16 - Subscriber+ RCE CVE-2023-5931 8.8 HighDecember 26, 2023
• kainelabs youzify, unknown youzify – buddypress community, user profile, social network & membership plugin for wordpress, youzify – buddypress community, user profile, social network & membership plugin for wordpress +2 more Youzify < 1.2.0 - Unauthenticated SQLi CVE-2022-1950 9.8 CriticalAugust 1, 2022
• kainelabs youzify, unknown youzify – buddypress community, user profile, social network & membership plugin for wordpress, youzify – buddypress community, user profile, social network & membership plugin for wordpress +2 more Youzify < 1.0.7 - Stored Cross-Site Scripting via Biography CVE-2021-24443 5.4 MediumAugust 2, 2021