berrypress

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

berrypress records in CISA KEV

No berrypress vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2025-01744 CVE-2025-2006 · GHSA-378w-m5r6-wj6p

Inline Image Upload for BBPress <= 1.1.19 - Authenticated (Subscriber+) Arbitrary File Upload

MEDIUM 42

The Inline Image Upload for BBPress plugin for WordPress is vulnerable to arbitrary file uploads due to missing file extension validation in the file uploading functionality in all versions up to, and including, 1.1.19.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00893 Published 2025-03-29 No fix listed CWE-434

Open these records in search →

Critical	0
High	1
Medium	0
Low	0
No CVSS	0