Skip to content
Sign in
3.5 Low

CVE-2024-12767 The buddyboss-platform WordPress plugin before 2.7.60 lacks proper access controls and allows a logged-in user to view…

Description

The buddyboss-platform WordPress plugin before 2.7.60 lacks proper access controls and allows a logged-in user to view comments on private posts

Affected products and versions

Product Affected versions Fixed in
buddyboss-platform 2.7 earliest → < 2.7.60 2.7.60

Other CVEs of buddyboss-platform

The 3 CVEs of buddyboss-platform →
CVE-2024-4886 The contains an IDOR vulnerability that allows a user to comment on a private post by manipulating the ID included in… 4.3 Medium CVE-2024-4750 The buddyboss-platform WordPress plugin before 2.6.0 contains an IDOR vulnerability that allows a user to like a private… 5.3 Medium
Track this CVE