Product by BuddyBoss

    Boss Media BuddyBoss Platform

    9 known vulnerabilities in Boss Media BuddyBoss Platform (BuddyBoss), 0 of them actively exploited (CISA KEV).

    Key figures

    9

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    2

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Boss Media BuddyBoss Platform (BuddyBoss)
    CriticalCVE-2026-56032

    WordPress Buddyboss Platform plugin <= 3.0.4 - PHP Object Injection vulnerability

    		9.8
    HighCVE-2026-118082

    WordPress Buddyboss Platform plugin <= 3.5.0 - Privilege Escalation vulnerability

    		8.8
    CriticalCVE-2025-1909

    BuddyBoss Platform Pro <= 2.7.01 - Authentication Bypass via Apple OAuth provider

    		9.8
    MediumCVE-2024-13858

    Boss Media BuddyBoss Theme: Cross-site Scripting

    also in 1 other product

    		6.4
    MediumCVE-2024-13860

    Boss Media BuddyBoss Platform: Cross-site Scripting

    also in 1 other product

    		6.4
    MediumCVE-2024-13859

    Boss Media BuddyBoss Platform: Cross-site Scripting

    also in 1 other product

    		6.4
    MediumCVE-2024-13402

    Boss Media BuddyBoss Platform: Cross-site Scripting

    also in 1 other product

    		6.4
    MediumCVE-2024-4886

    BuddyBoss Platform < 2.6.0 - Subscriber+ Comment on Private Post via IDOR

    		4.3
    LowCVE-2024-12767

    BuddyBoss platform < 2.7.60 - Private Comment Exposure via IDOR

    		3.5

    All products by BuddyBoss