BuddyDev

Records10All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

BuddyDev records in CISA KEV

No BuddyDev vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Activity Plus Reloaded For Buddypress 1 record LOW

Records

1 record in Activity Plus Reloaded For Buddypress · all components

TI-2024-11052 CVE-2024-11913 · GHSA-j95r-rm3w-f776

Activity Plus Reloaded for BuddyPress <= 1.1.1 - Authenticated (Subscriber+) Blind Server-Side Request Forgery

LOW 24

The Activity Plus Reloaded for BuddyPress plugin for WordPress is vulnerable to Blind Server-Side Request Forgery in all versions up to, and including, 1.1.1 via the 'ajax_preview_link' function.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00246 Published 2025-01-24 No fix listed CWE-918

Open these records in search →

Critical	0
High	3
Medium	7
Low	0
No CVSS	0