Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

1 record

Vendor: lamarant Clear all filters
TI-2025-03343 CVE-2025-3793 · GHSA-hv8q-7rjw-5h3j

Buddypress Force Password Change <= 0.1 - Authenticated (Subscriber+) Account Takeover via Password Update

Priority LOW 19

The Buddypress Force Password Change plugin for WordPress is vulnerable to authenticated account takeover due to the plugin not properly validating a user's identity prior to updating their password through the 'bp_force…

CVSS 3.1MEDIUM 4.2 Network Low privileges No interaction EPSS 0.00224 Published 2025-04-24 No fix listed CWE-620