Extension WordPress
Vulnérabilités BuddyPress Docs
Cette page rassemble les failles publiées pour BuddyPress Docs, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de BuddyPress Docs
3 fiches
BuddyPress Docs <= 2.2.4 – Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary Document Read/Update
The BuddyPress Docs plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.2.4 via the 'doc_id' parameter due to missing authorization validation on the user controlled key. This makes it…
*-2.2.4
2.2.5
06/06/2025
BuddyPress Docs <= 2.2.3 – Reflected Cross-Site Scripting
The BuddyPress Docs plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of remove_query_arg without appropriate escaping on the URL in all versions up to, and including, 2.2.3. This makes it possible for unauthenticated…
*-2.2.3
2.2.4
07/10/2024
BuddyPress Docs <= 1.9.2 – Authorization Bypass
An issue was discovered in includes/component.php in the BuddyPress Docs plugin before 1.9.3 for WordPress. It is possible for authenticated users to edit documents of other users without proper permissions.
[*, 1.9.3)
1.9.3
17/03/2017
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.