Buddypress Vulnerabilità

Sequenza temporale

Versione

4.6.0	3
4.6.1	3
4.6.2	3
4.6.3	3
4.6.4	3

Contromisure

Official Fix	12
Temporary Fix	0
Workaround	0
Unavailable	0
Not Defined	7

Sfruttabilità

High	0
Functional	0
Proof-of-Concept	2
Unproven	0
Not Defined	17

Accesso al vettore

Not Defined	0
Physical	0
Local	0
Adjacent	0
Network	19

Autenticazione

Not Defined	0
High	1
Low	10
None	8

Interazione dell'utente

Not Defined	0
Required	10
None	9

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	1
≤5	5
≤6	4
≤7	5
≤8	4
≤9	0
≤10	0

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	1
≤5	6
≤6	4
≤7	5
≤8	3
≤9	0
≤10	0

VulDB

≤1	0
≤2	0
≤3	1
≤4	4
≤5	5
≤6	0
≤7	7
≤8	2
≤9	0
≤10	0

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	2
≤6	3
≤7	1
≤8	2
≤9	4
≤10	0

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	1
≤6	1
≤7	2
≤8	1
≤9	0
≤10	0

Fornitore

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Exploiter 0 giorni

<1k	4
<2k	10
<5k	5
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Exploiter aujourd'hui

<1k	17
<2k	1
<5k	1
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Affected Versions (89): 1, 1.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, 1.0.5, 1.0.6, 1.0.7, 1.0.8, 1.0.9, 1.0.11, 1.0.12, 1.0.13, 1.0.14, 1.0.15, 1.0.16, 1.0.17, 1.0.18, 1.0.19, 1.0.21, 1.0.22, 1.2, 1.2.1, 1.5, 1.5.1, 1.5.2, 1.5.3, 1.6, 1.6.1, 1.6.2, 1.6.3, 1.9, 1.9.1, 1.9.2, 2.8, 2.8.1, 2.8.2, 2.8.3, 3.0, 3.0.15, 3.1, 3.2, 3.3, 3.4, 3.4.1, 3.4.2, 3.4.3, 3.4.4, 3.4.5, 3.4.6, 3.4.7, 3.4.8, 3.4.9, 3.4.11, 3.4.12, 3.4.13, 3.4.14, 3.4.15, 3.4.16, 3.4.17, 3.4.18, 3.4.19, 3.5, 4.6, 4.6.1, 4.6.2, 4.6.3, 4.6.4, 4.6.5, 4.6.6, 4.6.7, 4.6.8, 4.6.9, 4.6.11, 4.6.12, 4.6.13, 4.6.14, 4.6.15, 4.6.16, 4.6.17, 4.6.18, 5.1, 5.1.1, 7.0, 7.1, 7.2, 11.3, 11.3.1

Tipo di software: WordPress Plugin

Data di pubblicazione	Base	Temp	Vulnerabilità	0day	Oggi	Sfr	Con	CTI	CVE
22/04/2024	6.3	6.1	rtMedia for BuddyPress and bbPress Plugin rtmedia_gallery sql injection	$0-$5k	$0-$5k	Not Defined	Not Defined	0.21	CVE-2024-3293
22/03/2024	7.3	7.1	BuddyPress WooCommerce my Account Integration Plugin get_simple_request escalazione di privilegi	$0-$5k	$0-$5k	Not Defined	Not Defined	0.05	CVE-2024-2025
29/12/2023	5.1	5.1	BuddyPress Plugin cross site scripting	$0-$5k	$0-$5k	Not Defined	Not Defined	0.04	CVE-2023-50880
26/12/2023	7.5	7.4	rtMedia Plugin/BuddyPress Plugin/bbPress Plugin escalazione di privilegi	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2023-5931
26/12/2023	6.7	6.6	rtMedia Plugin/BuddyPress Plugin/bbPress Plugin File Import escalazione di privilegi	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2023-5939
25/10/2023	4.4	4.4	BuddyBoss BuddyPress Global Search Plugin cross site scripting	$0-$5k	$0-$5k	Not Defined	Not Defined	0.02	CVE-2023-45755
23/04/2023	5.8	5.8	Paramveer Singh Activity Reactions for Buddypress Plugin cross site request forgery	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2022-45074
27/03/2023	4.3	4.2	Wbcom Designs BuddyPress Activity Social Share Plugin cross site request forgery	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2023-28694
19/07/2022	6.0	5.9	Wbcom Designs BuddyPress Group Reviews Plugin escalazione di privilegi	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2022-2108
02/08/2021	3.5	3.4	BuddyPress Community Plugin About Me Widget cross site scripting	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-24443