Robin W

Products

ProductCVEsExploitedLatest
bbp style pack2–Oct 1, 2026
bbp topic count1–Sep 26, 2025

Exploited and recent CVEs

  • CVE-2026-101925 Medium 6.4 bbp style pack <= 6.4.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Author Display Name 0.2%
  • CVE-2026-15010 Medium 6.4 bbp style pack <= 6.4.5 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Topic Form Additional Fields 0.3%
  • CVE-2025-60163 Medium 6.5 WordPress bbp topic count plugin <= 3.2 - Cross Site Scripting (XSS) vulnerability 0.2%