Vulnerabilities and Security Researches

BuddyPress, CVE-2014-1889

CVE, Research URL: CVE-2014-1889
Home page URL: Security reports for BuddyPress
Application: BuddyPress
Published on: Apr 10, 2018
Research Description: The Group creation process in the Buddypress plugin before 1.9.2 for WordPress allows remote authenticated users to gain control of arbitrary groups by leveraging a missing permissions check.
Affected versions: max 1.9.2.
Status: vulnerable