Activity Plus Reloaded for BuddyPress vulnerabilities

Product

Activity Plus Reloaded for BuddyPress

by buddydev · last CVE Oct 27, 2025

CVEs

On KEV

6.5

Max CVSS

New 30D

Severity mix

Critical 0High 0Medium 3Low 0

Severity

Exploitation

Watch

Add Activity Plus Reloaded for BuddyPress to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2025-62949	6.5	0%	Oct 27	WordPress Activity Plus Reloaded for BuddyPress plugin <= 1.1.2 - Cross Site Scripting (XSS) vulnerability Affected: through 1.1.2
CVE-2025-30957	5.4	0%	Jun 6	WordPress Activity Plus Reloaded for BuddyPress plugin <= 1.1.2 - Broken Access Control Vulnerability Affected: through 1.1.2
CVE-2024-11913	5.4	0%	Jan 24	Activity Plus Reloaded for BuddyPress <= 1.1.1 - Authenticated (Subscriber+) Blind Server-Side Request Forgery Affected: through 1.1.1