4.3
Medium
CVE-2025-5526 The BuddyPress Docs WordPress plugin before 2.2.5 lacks proper access controls and allows a logged in user to view and…
Description
The BuddyPress Docs WordPress plugin before 2.2.5 lacks proper access controls and allows a logged in user to view and download files belonging to another user
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| BuddyPress Docs 2.2 | earliest → < 2.2.5 | 2.2.5 |