BBuddyBoss

Products

Exploited and recent CVEs

• CVE-2026-76124 High 8.8 BuddyBoss App <= 3.2.1 - Authenticated (Subscriber+) Arbitrary File Upload via Feedback Endpoint 0.4%
• CVE-2026-118082 High 8.8 WordPress Buddyboss Platform plugin <= 3.5.0 - Privilege Escalation vulnerability 0.4%
• CVE-2026-56032 Critical 9.8 WordPress Buddyboss Platform plugin <= 3.0.4 - PHP Object Injection vulnerability 0.6%
• CVE-2025-1909 Critical 9.8 BuddyBoss Platform Pro <= 2.7.01 - Authentication Bypass via Apple OAuth provider 0.7%
• CVE-2023-45755 Medium 5.9 WordPress BuddyPress Global Search Plugin <= 1.2.1 is vulnerable to Cross Site Scripting (XSS) 0.5%
• CVE-2023-32671 Medium 6.3 BuddyBoss XSS vulnerability 0.4%
• CVE-2023-32670 Critical 9.0 BuddyBoss XSS vulnerability 0.4%
• CVE-2023-32669 Medium 5.4 Authorization Bypass on BuddyBoss 0.4%