Login Request a demo
BU
Product
BuddyForms
by Themekraft · last CVE Sep 10, 2026
12
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities12In the news0Timeline
Severity mix
Critical 2High 3Medium 7Low 0
Severity
All severities12Critical2High3Medium7Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add BuddyForms to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-26326
9.8
4%
Feb 23
The BuddyForms WordPress plugin, in versions prior to 2.7.8, was affected by an unauthenticated insecure deserialization issue
Affected: before 2.7.8
CVE-2018-21003
9.8
2%
Aug 27
The buddyforms plugin before 2.2.8 for WordPress has SQL injection
Affected: before 2.2.8
CVE-2025-32151
8.8
1%
Apr 4
WordPress BuddyForms plugin <= 2.10.2 - Local File Inclusion vulnerability
Affected: through 2.10.2
CVE-2024-8246
8.8
0%
Sep 14
Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) <= 2.8.11 - Authenticated (Contributor+) Privilege Escalation
Affected: before 2.8.12
CVE-2024-32830
7.5
1%
May 17
WordPress buddyforms plugin <= 2.8.8- Arbitrary File Read and SSRF vulnerability
Affected: through 2.8.8
CVE-2026-81785
6.5
0%
Sep 10
WordPress BuddyForms plugin <= 2.9.0 - Broken Access Control vulnerability
Affected: through 2.9.0
CVE-2024-30198
6.1
0%
Mar 27
WordPress Buddyforms plugin <= 2.8.5 - Reflected Cross Site Scripting (XSS) vulnerability
Affected: through 2.8.5
CVE-2024-12038
5.4
0%
Feb 22
Frontend Content Forms for User Submissions (UGC) <= 2.8.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'buddyforms_nav' Shortcode
Affected: before 2.8.16
CVE-2024-47377
5.4
0%
Oct 5
WordPress BuddyForms plugin <= 2.8.12 - Cross Site Scripting (XSS) vulnerability
Affected: through 2.8.12
CVE-2025-62973
5.3
0%
Oct 27
WordPress BuddyForms plugin <= 2.10.2 - Broken Access Control vulnerability
Affected: through 2.10.2
CVE-2024-5149
5.3
0%
Jun 5
BuddyForms <= 2.8.9 - Email Verification Bypass due to Insufficient Randomness
Affected: through 2.8.9
CVE-2024-1158
4.3
1%
Mar 13
Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) <= 2.8.7 - Missing Authorization
Affected: before 2.8.8
Showing 12