BuddyBoss vulnerabilities
8 published CVEs name BuddyBoss among the affected products.
- 8Published CVEs8 of them scored
- 3Last 12 monthspublished in the last year
- 3Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-76124
BuddyBoss App <= 3.2.1 - Authenticated (Subscriber+) Arbitrary File Upload via Feedback Endpoint
BuddyBoss · BuddyBoss App
High8.8 - CVE-2026-118082
WordPress Buddyboss Platform plugin <= 3.5.0 - Privilege Escalation vulnerability
BuddyBoss · Buddyboss Platform
High8.8 - CVE-2026-56032
WordPress Buddyboss Platform plugin <= 3.0.4 - PHP Object Injection vulnerability
BuddyBoss · Buddyboss Platform
Critical9.8 - CVE-2025-1909
BuddyBoss Platform Pro <= 2.7.01 - Authentication Bypass via Apple OAuth provider
BuddyBoss · BuddyBoss Platform Pro
Critical9.8 - CVE-2023-45755
WordPress BuddyPress Global Search Plugin <= 1.2.1 is vulnerable to Cross Site Scripting (XSS)
BuddyBoss · BuddyPress Global Search
Medium5.9 - CVE-2023-32671
BuddyBoss XSS vulnerability
BuddyBoss · BuddyBoss
Medium6.3 - CVE-2023-32670
BuddyBoss XSS vulnerability
BuddyBoss · BuddyBoss
Critical9.0 - CVE-2023-32669
Authorization Bypass on BuddyBoss
BuddyBoss · BuddyBoss
Medium5.4