Read the docs

wbcomdesigns

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

wbcomdesigns records in CISA KEV

No wbcomdesigns vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Activity Link Preview For Buddypress 1 record MEDIUM Buddypress Activity Social Share 1 record LOW Buddypress Group Reviews 1 record LOW Custom Font Uploader 1 record LOW

Records

1 record in Buddypress Group Reviews · all components

TI-2022-01951 CVE-2022-2108 · GHSA-j8g4-6p94-j4fp

Wbcom Designs – BuddyPress Group Reviews <= 2.8.3 - Unauthorized AJAX Actions due to Nonce Bypass

Priority LOW 36

The plugin Wbcom Designs – BuddyPress Group Reviews for WordPress is vulnerable to unauthorized settings changes and review modification due to missing capability checks and improper nonce checks in several functions rel…

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00851 Published 2022-07-18 No fix listed CWE-862
Open these records in search →