Skip to main content

Buddypress Group Reviews

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest
CVE-2022-2108 Jul 18, 17:15 MEDIUM PATCH This Month

The plugin Wbcom Designs - BuddyPress Group Reviews for WordPress is vulnerable to unauthorized settings changes and review modification due to missing capability checks and improper nonce checks in. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Missing Authorization vulnerability could allow attackers to access resources or perform actions without proper authorization checks.

WordPress Authentication Bypass Buddypress Group Reviews Wordpress Plugin Wbcomdesigns
NVD VulDB
CVSS 3.1
6.5
EPSS
0.7%
CVE-2022-2108
EPSS 1% CVSS 6.5
MEDIUM PATCH This Month

The plugin Wbcom Designs - BuddyPress Group Reviews for WordPress is vulnerable to unauthorized settings changes and review modification due to missing capability checks and improper nonce checks in. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Missing Authorization vulnerability could allow attackers to access resources or perform actions without proper authorization checks.

WordPress Authentication Bypass Buddypress Group Reviews +2
NVD VulDB

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy