ThemeKraft BuddyForms

The BuddyForms WordPress plugin, in versions prior to 2.7.8, was affected by an unauthenticated insecure deserialization issue. An unauthenticated attacker could leverage this issue to call files using a PHAR wrapper that will deserialize the data and call arbitrary PHP Objects that can be used to perform a variety of malicious actions granted a POP chain is also present.

The buddyforms plugin before 2.2.8 for WordPress has SQL injection.

WordPress BuddyForms Plugin <= 2.9.0 - Local File Inclusion vulnerability

Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) <= 2.8.11 - Authenticated (Contributor+) Privilege Escalation

WordPress buddyforms plugin <= 2.8.8- Arbitrary File Read and SSRF vulnerability

BuddyForms <= 2.8.9 - Email Verification Bypass due to Insufficient Randomness

Frontend Content Forms for User Submissions (UGC) <= 2.8.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'buddyforms_nav' Shortcode

WordPress Buddyforms plugin <= 2.8.5 - Reflected Cross Site Scripting (XSS) vulnerability

WordPress BuddyForms plugin <= 2.8.12 - Cross Site Scripting (XSS) vulnerability

WordPress BuddyForms plugin <= 2.9.0 - Broken Access Control vulnerability

Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) <= 2.8.7 - Missing Authorization