Activity Plus Reloaded for BuddyPress, CVE-2025-30957

CVE, Research URL: CVE-2025-30957
Home page URL: Security reports for Activity Plus Reloaded for BuddyPress
Application: Activity Plus Reloaded for BuddyPress
Published on: Jun 06, 2025
Research Description: Missing Authorization vulnerability in BuddyDev Activity Plus Reloaded for BuddyPress allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Activity Plus Reloaded for BuddyPress: from n/a through 1.1.2.
Affected versions: max 1.1.2.
Status: vulnerable