Vulnerabilities in BuddyBoss

6 results

CVE-2025-1909CRITICALBuddyBoss Platform Pro <= 2.7.01 - Authentication Bypass via Apple OAuth providerEPSS 0.6%CVE-2026-56032CRITICALWordPress Buddyboss Platform plugin <= 3.0.4 - PHP Object Injection vulnerabilityEPSS 0.5%CVE-2023-45755MEDIUMWordPress BuddyPress Global Search Plugin <= 1.2.1 is vulnerable to Cross Site Scripting (XSS)EPSS 0.4%CVE-2023-32670CRITICALBuddyBoss XSS vulnerabilityEPSS 0.4%CVE-2023-32671MEDIUMBuddyBoss XSS vulnerabilityEPSS 0.3%CVE-2023-32669MEDIUMAuthorization Bypass on BuddyBossEPSS 0.3%