BuddyBoss vulnerabilities
8 published CVEs name BuddyBoss among the affected products.
- Published CVEs
- 8
- Last 12 months
- 3
- Critical
- 3
- Known exploited
- 0
Critical 3High 2Medium 3Low 0Not scored 0
CVEs per yearBy the year they were published
- 20234
- 20251
- 20263
Newest CVEs
- CVE-2026-76124
BuddyBoss App <= 3.2.1 - Authenticated (Subscriber+) Arbitrary File Upload via Feedback Endpoint
BuddyBoss · BuddyBoss App
High8.8 - CVE-2026-118082
WordPress Buddyboss Platform plugin <= 3.5.0 - Privilege Escalation vulnerability
BuddyBoss · Buddyboss Platform
High8.8 - CVE-2026-56032
WordPress Buddyboss Platform plugin <= 3.0.4 - PHP Object Injection vulnerability
BuddyBoss · Buddyboss Platform
Critical9.8 - CVE-2025-1909
BuddyBoss Platform Pro <= 2.7.01 - Authentication Bypass via Apple OAuth provider
BuddyBoss · BuddyBoss Platform Pro
Critical9.8 - CVE-2023-45755
WordPress BuddyPress Global Search Plugin <= 1.2.1 is vulnerable to Cross Site Scripting (XSS)
BuddyBoss · BuddyPress Global Search
Medium5.9 - CVE-2023-32671
BuddyBoss XSS vulnerability
BuddyBoss · BuddyBoss
Medium6.3 - CVE-2023-32670
BuddyBoss XSS vulnerability
BuddyBoss · BuddyBoss
Critical9.0 - CVE-2023-32669
Authorization Bypass on BuddyBoss
BuddyBoss · BuddyBoss
Medium5.4