Bbpress

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2020-13693 PHP CRITICAL POC PATCH THREAT Act Now

An unauthenticated privilege-escalation issue exists in the bbPress plugin before 2.6.5 for WordPress when New User Registration is enabled. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

WordPress Privilege Escalation Bbpress

NVD Exploit-DB

CVSS 3.1

9.8

EPSS

43.9%

CVE-2020-13487 PHP MEDIUM POC This Month

The bbPress plugin through 2.6.4 for WordPress has stored XSS in the Forum creation section, resulting in JavaScript execution at wp-admin/edit.php?post_type=forum (aka the Forum listing page) for. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

XSS WordPress PHP Bbpress

NVD

CVSS 3.1

4.8

EPSS

1.4%

CVE-2020-13693 PHP

EPSS 44% CVSS 9.8

CRITICAL POC PATCH THREAT Act Now

WordPress Privilege Escalation Bbpress

NVD Exploit-DB

CVE-2020-13487 PHP

EPSS 1% CVSS 4.8

MEDIUM POC This Month

XSS WordPress PHP +1

NVD