Vulnerabilities

TI-2025-31874 CVE-2025-49959 · GHSA-3c5v-vg8q-xfjh

WordPress bbPress Move Topics plugin <= 1.1.6 - Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pascal Casier bbPress Move Topics bbp-move-topics allows Reflected XSS.This issue affects bbPress Move Topics: from n/…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.0025 Published 2025-10-22 No fix listed CWE-79

TI-2025-18480 CVE-2025-24763 · GHSA-xcxx-7vqc-qj5x

WordPress bbPress API plugin <= 1.0.14 - Broken Access Control Vulnerability

LOW 30

Missing Authorization vulnerability in Pascal Casier bbPress API bbp-api allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects bbPress API: from n/a through <= 1.0.14.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00355 Published 2025-06-06 No fix listed CWE-862

TI-2025-17266 CVE-2025-23499 · GHSA-48cr-x7pp-992r

WordPress Board Election plugin <= 1.0.1 - CSRF to Stored Cross Site Scripting (XSS) vulnerability

LOW 31

Cross-Site Request Forgery (CSRF) vulnerability in Pascal Casier Board Election board-election allows Stored XSS.This issue affects Board Election: from n/a through <= 1.0.1.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00211 Published 2025-01-16 No fix listed CWE-352

Vulnerabilities

Filters

WordPress bbPress Move Topics plugin <= 1.1.6 - Cross Site Scripting (XSS) vulnerability

WordPress bbPress API plugin <= 1.0.14 - Broken Access Control Vulnerability

WordPress Board Election plugin <= 1.0.1 - CSRF to Stored Cross Site Scripting (XSS) vulnerability