BuddyBoss BuddyBoss Platform any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

7CVEs

BuddyBoss Platform Pro <= 2.7.01 - Authentication Bypass via Apple OAuth provider

Published 2025-05-05 · Analyzed

9.8EPSS 0.006

BuddyBoss Platform and BuddyBoss Theme <= Multiple Versions - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'invitee_name'

Published 2025-05-02 · Modified

6.4EPSS 0.003

BuddyBoss Platform <= 2.8.50 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'bp_nouveau_ajax_media_save' function

Published 2025-05-02 · Modified

6.4EPSS 0.003

BuddyBoss Platform <= 2.8.50 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'bbp_topic_title'

Published 2025-05-02 · Modified

6.4EPSS 0.003

BuddyBoss Platform <= 2.7.70 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'link_title'

Published 2025-02-27 · Analyzed

6.4EPSS 0.002

BuddyBoss Platform < 2.6.0 - Subscriber+ Comment on Private Post via IDOR

Published 2024-06-05 · Modified

4.3EPSS 0.004

BuddyBoss platform < 2.7.60 - Private Comment Exposure via IDOR

Published 2025-05-15 · Modified

3.5EPSS 0.003