Buddydev Activity Plus Reloaded For Buddypress
3 CVEs affecting Buddydev Activity Plus Reloaded For Buddypress. Latest disclosed: 2025-10-27. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-62949 | Medium | 6.5 | 2025-10-27 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BuddyDev Activity Plus Reloaded for BuddyPress bp-activit… |
CVE-2025-30957 | Medium | 5.4 | 2025-06-06 | Missing Authorization vulnerability in BuddyDev Activity Plus Reloaded for BuddyPress bp-activity-plus-reloaded allows Exploiting Incorrectly Configured Access… |
CVE-2024-11913 | Medium | 5.4 | 2025-01-24 | The Activity Plus Reloaded for BuddyPress plugin for WordPress is vulnerable to Blind Server-Side Request Forgery in all versions up to, and including, 1.1.1 v… |