Wbcomdesigns

4 CVEs across 7 Wbcomdesigns products. Browse Wbcomdesigns vulnerabilities, severities, and proof-of-concept exploits.

Wbcomdesigns products with known CVEs

ProductCVEs
Activity Link Preview For Buddypress1
Buddypress Activity Social Share1
Buddypress Group Reviews1
Custom Font Uploader1
Wbcom Designs1
Wbcom Designs – Buddypress Group Reviews1
Wbcom Designs – Custom Font Uploader1
Wbcomdesigns CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-67582Medium5.32025-12-09Missing Authorization vulnerability in wbcomdesigns Wbcom Designs lock-my-bp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue…
CVE-2025-47548Medium5.42025-05-07Server-Side Request Forgery (SSRF) vulnerability in Varun Dubey Wbcom Designs - Activity Link Preview For BuddyPress activity-link-preview-for-buddypress allow…
CVE-2024-5489Medium4.32024-06-06The Wbcom Designs – Custom Font Uploader plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'cfu_delete_c…
CVE-2023-28694Medium5.42023-11-12Cross-Site Request Forgery (CSRF) vulnerability in Wbcom Designs Wbcom Designs – BuddyPress Activity Social Share plugin <= 3.5.0 versions.
CVE-2022-2108Medium6.52022-07-18The plugin Wbcom Designs – BuddyPress Group Reviews for WordPress is vulnerable to unauthorized settings changes and review modification due to missing capabil…