Beveiligingsadvies

CVE-2026-8155

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-07-31 06:00:10

Laatst bijgewerkt 2026-07-31 17:46:16

Toegewezen door WPScan

CVSS-score 5.4

Status PUBLISHED

Beschrijving

The BuddyPress WordPress plugin before 14.5.0 does not properly enforce authorization on its private messaging endpoints, allowing any authenticated user (Subscriber+) to read, modify, or delete other users' private messages.

← Alle CVE's bekijken Bekijk op cve.org ↗