BuddyPress WooCommerce My Account Integration. Create WooCommerce Member Pages vulnerabilities

Product

BuddyPress WooCommerce My Account Integration. Create WooCommerce Member Pages

by themekraft · last CVE Mar 1, 2025

CVEs

On KEV

8.8

Max CVSS

New 30D

Severity mix

Critical 0High 2Medium 2Low 0

Severity

Exploitation

Watch

Add BuddyPress WooCommerce My Account Integration. Create WooCommerce Member Pages to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2024-35726	8.8	0%	Jun 10	WordPress WooBuddy plugin <= 3.4.19 - Broken Access Control vulnerability Affected: before 3.4.20
CVE-2024-2025	8.8	1%	Mar 23	BuddyPress WooCommerce My Account Integration. Create WooCommerce Member Pages <= 3.4.20 - Authenticated (Subscriber+) PHP Object Injection in get_simple_request Affected: through 3.4.20
CVE-2025-1780	4.3	0%	Mar 1	BuddyPress WooCommerce My Account Integration. Create WooCommerce Member Pages <= 3.4.25 - Cross-Site Request Forgery to Limited Settings Update Affected: through 3.4.25
CVE-2024-13358	4.3	0%	Mar 1	BuddyPress WooCommerce My Account Integration. Create WooCommerce Member Pages <= 3.4.24 - Missing Authorization to Authenticated (Subscriber+) Limited Settings Update Affected: through 3.4.24