📦 Buddypress

This reflected cross-site scripting (XSS) vulnerability in the Mass Messaging in BuddyPress WordPress plugin allows attackers to inject malicious scripts into web pages. When a user visits a specially...

This vulnerability in BuddyPress allows non-privileged users to escalate their privileges to administrator level by exploiting an issue in the REST API members endpoint. It affects BuddyPress installa...

This stored XSS vulnerability in BuddyPress allows authenticated users with subscriber-level permissions or higher to inject malicious scripts into web pages via the 'user_name' parameter. The injecte...