Vulnerabilities and Security Researches

BuddyPress, CVE-2012-2109

CVE, Research URL: CVE-2012-2109
Home page URL: Security reports for BuddyPress
Application: BuddyPress
Published on: Sep 05, 2012
Research Description: SQL injection vulnerability in wp-load.php in the BuddyPress plugin 1.5.x before 1.5.5 of WordPress allows remote attackers to execute arbitrary SQL commands via the page parameter in an activity_widget_filter action.
Affected versions: Min 5.0.0, max 6.4.0.
Status: vulnerable