Read the docs

wbcomdesigns

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

wbcomdesigns records in CISA KEV

No wbcomdesigns vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Activity Link Preview For Buddypress 1 record MEDIUM Buddypress Activity Social Share 1 record LOW Buddypress Group Reviews 1 record LOW Custom Font Uploader 1 record LOW

Records

5 records

TI-2025-30045 CVE-2025-47548 · GHSA-cpjv-5wwh-mwg5

Server-side request forgery in Varun Dubey Wbcom Designs - Activity Link Preview For…

Priority MEDIUM 42

Server-Side Request Forgery (SSRF) vulnerability in Varun Dubey Wbcom Designs - Activity Link Preview For BuddyPress activity-link-preview-for-buddypress allows Server Side Request Forgery.This issue affects Wbcom Design…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00308 Published 2025-05-07 No fix listed CWE-918
TI-2022-01951 CVE-2022-2108 · GHSA-j8g4-6p94-j4fp

Wbcom Designs – BuddyPress Group Reviews <= 2.8.3 - Unauthorized AJAX Actions due to Nonce Bypass

Priority LOW 36

The plugin Wbcom Designs – BuddyPress Group Reviews for WordPress is vulnerable to unauthorized settings changes and review modification due to missing capability checks and improper nonce checks in several functions rel…

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00851 Published 2022-07-18 No fix listed CWE-862
TI-2025-41336 CVE-2025-67582 · GHSA-98fv-j8hf-wx9g

WordPress Wbcom Designs plugin <= 2.1.1 - Broken Access Control vulnerability

Priority LOW 29

Missing Authorization vulnerability in wbcomdesigns Wbcom Designs lock-my-bp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Wbcom Designs: from n/a through <= 2.1.1.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00209 Published 2025-12-09 No fix listed CWE-862
TI-2024-05100 CVE-2024-5489 · GHSA-g9vh-rmj6-m6r2

Wbcom Designs - Custom Font Uploader <= 2.3.4 - Missing Authorization to Font Deletion

Priority LOW 20

The Wbcom Designs – Custom Font Uploader plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'cfu_delete_customfont' function in all versions up to, and including, 2.3…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00453 Published 2024-06-06 No fix listed CWE-862
Open these records in search →