BU
Vendor
buddydev
10
CVEs
0
On KEV
1
New 30D
Products
BX8.8
BuddyPress Xprofile Custom Field Types
buddydev
2 CVEs0 on KEV1 new
AP6.5
Activity Plus Reloaded for BuddyPress
buddydev
3 CVEs0 on KEV0 new
ME7.5
MediaPress
buddydev
3 CVEs0 on KEV0 new
BA6.5
BuddyPress Activity Shortcode
BuddyDev
1 CVEs0 on KEV0 new
BN6.5
BuddyPress Notification Widget
BuddyDev
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-116868 New | BX BuddyPress Xprofile Custom Field Types BuddyDev | 8.8 | Oct 29 | WordPress BuddyPress Xprofile Custom Field Types plugin <= 1.3.1 - PHP Object Injection vulnerability |
| CVE-2026-22519 | ME MediaPress BuddyDev | 6.5 | Jan 8 | WordPress MediaPress plugin <= 1.6.2 - Cross Site Scripting (XSS) vulnerability |
| CVE-2025-14552 | ME MediaPress buddydev | 6.4 | Jan 6 | MediaPress <= 1.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Plugin's Shortcode |
| CVE-2025-14997 | BX BuddyPress Xprofile Custom Field Types buddydev | 8.8 | Jan 6 | BuddyPress Xprofile Custom Field Types <= 1.2.8 - Authenticated (Subscriber+) Arbitrary File Deletion |
| CVE-2025-62760 | BA BuddyPress Activity Shortcode BuddyDev | 6.5 | Dec 31 | WordPress BuddyPress Activity Shortcode plugin <= 1.1.8 - Cross Site Scripting (XSS) vulnerability |
| CVE-2025-62949 | AP Activity Plus Reloaded for BuddyPress BuddyDev | 6.5 | Oct 27 | WordPress Activity Plus Reloaded for BuddyPress plugin <= 1.1.2 - Cross Site Scripting (XSS) vulnerability |
| CVE-2025-58263 | BN BuddyPress Notification Widget BuddyDev | 6.5 | Sep 22 | WordPress BuddyPress Notification Widget Plugin <= 1.3.3 - Cross Site Scripting (XSS) Vulnerability |
| CVE-2025-58608 | ME MediaPress BuddyDev | 7.5 | Sep 3 | WordPress MediaPress Plugin <= 1.5.9.1 - Local File Inclusion Vulnerability |
| CVE-2025-30957 | AP Activity Plus Reloaded for BuddyPress BuddyDev | 5.4 | Jun 6 | WordPress Activity Plus Reloaded for BuddyPress plugin <= 1.1.2 - Broken Access Control Vulnerability |
| CVE-2024-11913 | AP Activity Plus Reloaded for BuddyPress buddydev | 5.4 | Jan 24 | Activity Plus Reloaded for BuddyPress <= 1.1.1 - Authenticated (Subscriber+) Blind Server-Side Request Forgery |