WordPress Plugin BuddyPress Multiple Security Bypass Vulnerabilities (7.2.1)

Description

WordPress Plugin BuddyPress is prone to multiple security bypass vulnerabilities. Exploiting these issues may allow attackers to perform otherwise restricted actions and subsequently create groups on behalf of another members, to favorite any private/hidden activities, or more. WordPress Plugin BuddyPress version 7.2.1 is vulnerable; prior versions may also be affected.

Remediation

Update to plugin version 7.3.0 or latest

References

Related Vulnerabilities

Severity

Classification

Tags