Activity Plus Reloaded For Buddypress

1 CVEs product

Monthly

CVE-2024-11913 MEDIUM This Month

The Activity Plus Reloaded for BuddyPress plugin for WordPress is vulnerable to Blind Server-Side Request Forgery in all versions up to, and including, 1.1.1 via the 'ajax_preview_link' function. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress SSRF Activity Plus Reloaded For Buddypress
NVD
CVSS 3.1
5.4
EPSS
0.1%
CVE-2024-11913
EPSS 0% CVSS 5.4
MEDIUM This Month

The Activity Plus Reloaded for BuddyPress plugin for WordPress is vulnerable to Blind Server-Side Request Forgery in all versions up to, and including, 1.1.1 via the 'ajax_preview_link' function. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress SSRF Activity Plus Reloaded For Buddypress
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy