TI-2025-03343 CVE-2025-3793 · GHSA-hv8q-7rjw-5h3j
Buddypress Force Password Change <= 0.1 - Authenticated (Subscriber+) Account Takeover via Password Update
Priority LOW 19
The Buddypress Force Password Change plugin for WordPress is vulnerable to authenticated account takeover due to the plugin not properly validating a user's identity prior to updating their password through the 'bp_force…